# RHSA-2023:2148: Security update for 14 packages RHSA-2023:2148, released May 9, 2023, fixes 51 CVEs across 14 products. None of them is reported as exploited. Patch Radar priority: High. - Web page: https://patchblox.com/security/fix/linux/rhsa-2023-2148 - Platform: Linux - Released: May 9, 2023 - Priority: High (Closes CVE-2022-41674, high severity) - CVEs: 51, exploited: 0, on CISA KEV: 0 - Vendor advisory: https://access.redhat.com/errata/RHSA-2023:2148 ## Applies to | Product | Release | Fixed in | |---|---|---| | [kernel-rt](https://patchblox.com/security/data/product/linux/kernel-rt.md) | RHEL 9 | 0:5.14.0-284.11.1.rt14.296.el9_2 | | [kernel-rt-core](https://patchblox.com/security/data/product/linux/kernel-rt-core.md) | RHEL 9 | 0:5.14.0-284.11.1.rt14.296.el9_2 | | [kernel-rt-debug](https://patchblox.com/security/data/product/linux/kernel-rt-debug.md) | RHEL 9 | 0:5.14.0-284.11.1.rt14.296.el9_2 | | [kernel-rt-debug-core](https://patchblox.com/security/data/product/linux/kernel-rt-debug-core.md) | RHEL 9 | 0:5.14.0-284.11.1.rt14.296.el9_2 | | [kernel-rt-debug-devel](https://patchblox.com/security/data/product/linux/kernel-rt-debug-devel.md) | RHEL 9 | 0:5.14.0-284.11.1.rt14.296.el9_2 | | [kernel-rt-debug-kvm](https://patchblox.com/security/data/product/linux/kernel-rt-debug-kvm.md) | RHEL 9 | 0:5.14.0-284.11.1.rt14.296.el9_2 | | [kernel-rt-debug-modules](https://patchblox.com/security/data/product/linux/kernel-rt-debug-modules.md) | RHEL 9 | 0:5.14.0-284.11.1.rt14.296.el9_2 | | [kernel-rt-debug-modules-core](https://patchblox.com/security/data/product/linux/kernel-rt-debug-modules-core.md) | RHEL 9 | 0:5.14.0-284.11.1.rt14.296.el9_2 | | [kernel-rt-debug-modules-extra](https://patchblox.com/security/data/product/linux/kernel-rt-debug-modules-extra.md) | RHEL 9 | 0:5.14.0-284.11.1.rt14.296.el9_2 | | [kernel-rt-devel](https://patchblox.com/security/data/product/linux/kernel-rt-devel.md) | RHEL 9 | 0:5.14.0-284.11.1.rt14.296.el9_2 | | [kernel-rt-kvm](https://patchblox.com/security/data/product/linux/kernel-rt-kvm.md) | RHEL 9 | 0:5.14.0-284.11.1.rt14.296.el9_2 | | [kernel-rt-modules](https://patchblox.com/security/data/product/linux/kernel-rt-modules.md) | RHEL 9 | 0:5.14.0-284.11.1.rt14.296.el9_2 | | [kernel-rt-modules-core](https://patchblox.com/security/data/product/linux/kernel-rt-modules-core.md) | RHEL 9 | 0:5.14.0-284.11.1.rt14.296.el9_2 | | [kernel-rt-modules-extra](https://patchblox.com/security/data/product/linux/kernel-rt-modules-extra.md) | RHEL 9 | 0:5.14.0-284.11.1.rt14.296.el9_2 | ## CVEs this fix closes | CVE | Priority | Title | CVSS | EPSS | Exploitation | |---|---|---|---:|---:|---| | [CVE-2022-41674](https://patchblox.com/security/data/cve/CVE-2022-41674.md) | High | backport-iwlwifi-dkms: An issue was discovered in the Linux kernel before 5.19.16 | 8.1 | 0.0414 | | | [CVE-2022-42896](https://patchblox.com/security/data/cve/CVE-2022-42896.md) | High | bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: u... | 8.8 | 0.0246 | | | [CVE-2022-3640](https://patchblox.com/security/data/cve/CVE-2022-3640.md) | High | kernel-devel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: t... | 8.8 | 0.0121 | | | [CVE-2022-3623](https://patchblox.com/security/data/cve/CVE-2022-3623.md) | High | kernel-debug-modules-core: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * use-after... | 7.5 | 0.0110 | | | [CVE-2023-52340](https://patchblox.com/security/data/cve/CVE-2023-52340.md) | High | linux: The IPv6 implementation in the Linux kernel before 6.3 has a net/ipv6/route.c max_size threshold that can be consumed... | 8.0 | 0.0094 | | | [CVE-2022-42720](https://patchblox.com/security/data/cve/CVE-2022-42720.md) | High | backport-iwlwifi-dkms: Various refcounting bugs in the multi-BSS handling in the mac80211 stack in the Linux kernel 5.1 through 5.19.x befor... | 7.8 | 0.0090 | | | [CVE-2022-3566](https://patchblox.com/security/data/cve/CVE-2022-3566.md) | High | linux: A vulnerability was identified in Linux Kernel up to 4.19.316/5.4.278/5.10.220/5.15.161 | 7.1 | 0.0074 | | | [CVE-2023-0461](https://patchblox.com/security/data/cve/CVE-2023-0461.md) | High | bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * use-after... | 7.8 | 0.0065 | | | [CVE-2021-33631](https://patchblox.com/security/data/cve/CVE-2021-33631.md) | High | bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: v... | 7.8 | 0.0037 | | | [CVE-2022-1882](https://patchblox.com/security/data/cve/CVE-2022-1882.md) | High | bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * use-after... | 7.8 | 0.0037 | | | [CVE-2022-33743](https://patchblox.com/security/data/cve/CVE-2022-33743.md) | High | kernel-rt-kvm: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high... | 7.8 | 0.0036 | | | [CVE-2022-2196](https://patchblox.com/security/data/cve/CVE-2022-2196.md) | High | linux: A regression exists in the Linux Kernel within KVM: nVMX that allowed for speculative execution attacks. L2 can carry... | 8.8 | 0.0035 | | | [CVE-2022-3625](https://patchblox.com/security/data/cve/CVE-2022-3625.md) | High | kernel-debug-modules-core: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * use-after... | 7.8 | 0.0035 | | | [CVE-2022-39189](https://patchblox.com/security/data/cve/CVE-2022-39189.md) | High | kernel-rt-kvm: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high... | 7.8 | 0.0034 | | | [CVE-2022-48695](https://patchblox.com/security/data/cve/CVE-2022-48695.md) | High | kernel-rt-debug-devel: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high... | 7.8 | 0.0024 | | | [CVE-2023-2513](https://patchblox.com/security/data/cve/CVE-2023-2513.md) | High | kernel-abi-stablelists: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: t... | 7.0 | 0.0024 | | | [CVE-2022-3028](https://patchblox.com/security/data/cve/CVE-2022-3028.md) | High | kernel-rt-debug-modules-extra: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high... | 7.0 | 0.0023 | | | [CVE-2023-0590](https://patchblox.com/security/data/cve/CVE-2023-0590.md) | High | kernel-abi-stablelists: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: t... | 7.0 | 0.0023 | | | [CVE-2021-47560](https://patchblox.com/security/data/cve/CVE-2021-47560.md) | High | bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system | 7.8 | 0.0022 | | | [CVE-2022-20141](https://patchblox.com/security/data/cve/CVE-2022-20141.md) | High | kernel-tools: The kernel packages contain the Linux kernel, the core of any Linux operating system. The following packages have be... | 7.0 | 0.0015 | | | [CVE-2022-3522](https://patchblox.com/security/data/cve/CVE-2022-3522.md) | High | kernel-debug-modules-core: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * use-after... | 7.0 | n/a | | | [CVE-2022-3435](https://patchblox.com/security/data/cve/CVE-2022-3435.md) | Routine | kernel-debug-modules-extra: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * use-after... | 5.5 | 0.0518 | | | [CVE-2022-2663](https://patchblox.com/security/data/cve/CVE-2022-2663.md) | Routine | kernel-rt: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high... | 5.3 | 0.0407 | | | [CVE-2022-3524](https://patchblox.com/security/data/cve/CVE-2022-3524.md) | Routine | kernel-debug-modules-core: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * use-after... | 5.5 | 0.0109 | | | [CVE-2023-0394](https://patchblox.com/security/data/cve/CVE-2023-0394.md) | Routine | bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * use-after... | 6.5 | 0.0104 | | | [CVE-2022-47929](https://patchblox.com/security/data/cve/CVE-2022-47929.md) | Routine | kernel-rt: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high... | 5.5 | 0.0104 | | | [CVE-2022-42703](https://patchblox.com/security/data/cve/CVE-2022-42703.md) | Routine | kernel-rt: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high... | 5.5 | 0.0092 | | | [CVE-2022-36280](https://patchblox.com/security/data/cve/CVE-2022-36280.md) | Routine | kernel-rt: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high... | 5.5 | 0.0079 | | | [CVE-2022-42721](https://patchblox.com/security/data/cve/CVE-2022-42721.md) | Routine | backport-iwlwifi-dkms: A list management bug in BSS handling in the mac80211 stack in the Linux kernel 5.1 through 5.19.x before 5.19.16 cou... | 5.5 | 0.0065 | | | [CVE-2022-3628](https://patchblox.com/security/data/cve/CVE-2022-3628.md) | Routine | kernel-debug-modules-core: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * use-after... | 6.8 | 0.0060 | | | [CVE-2022-42722](https://patchblox.com/security/data/cve/CVE-2022-42722.md) | Routine | backport-iwlwifi-dkms: In the Linux kernel 5.8 through 5.19.x before 5.19.16, local attackers able to inject WLAN frames into the mac80211 s... | 5.5 | 0.0060 | | | [CVE-2022-3619](https://patchblox.com/security/data/cve/CVE-2022-3619.md) | Routine | kernel-debug-modules-core: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * use-after... | 4.3 | 0.0060 | | | [CVE-2022-28388](https://patchblox.com/security/data/cve/CVE-2022-28388.md) | Routine | kernel-devel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: t... | 5.5 | 0.0040 | | | [CVE-2022-4662](https://patchblox.com/security/data/cve/CVE-2022-4662.md) | Routine | kernel-rt-debug-modules-extra: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high... | 5.5 | 0.0037 | | | [CVE-2022-43750](https://patchblox.com/security/data/cve/CVE-2022-43750.md) | Routine | kernel-rt: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high... | 6.7 | 0.0036 | | | [CVE-2022-1462](https://patchblox.com/security/data/cve/CVE-2022-1462.md) | Routine | kernel-rt-debug-modules-extra: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high... | 6.3 | 0.0034 | | | [CVE-2022-1789](https://patchblox.com/security/data/cve/CVE-2022-1789.md) | Routine | python3-perf: The kernel packages contain the Linux kernel, the core of any Linux operating system. The following packages have be... | 6.8 | 0.0034 | | | [CVE-2021-26341](https://patchblox.com/security/data/cve/CVE-2021-26341.md) | Routine | kernel-zfcpdump-modules-extra: The kernel packages contain the Linux kernel, the core of any Linux operating system. The following packages have be... | 6.5 | 0.0032 | | | [CVE-2022-3567](https://patchblox.com/security/data/cve/CVE-2022-3567.md) | Routine | kernel-debug-modules-core: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * use-after... | 6.4 | 0.0032 | | | [CVE-2022-36879](https://patchblox.com/security/data/cve/CVE-2022-36879.md) | Routine | kernel-rt: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high... | 5.5 | 0.0032 | | | [CVE-2021-33655](https://patchblox.com/security/data/cve/CVE-2021-33655.md) | Routine | kernel-rt-debug-kvm: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high... | 6.7 | 0.0032 | | | [CVE-2023-22998](https://patchblox.com/security/data/cve/CVE-2023-22998.md) | Routine | bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * use-after... | 5.5 | 0.0030 | | | [CVE-2022-4128](https://patchblox.com/security/data/cve/CVE-2022-4128.md) | Routine | kernel-rt: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high... | 5.5 | 0.0025 | | | [CVE-2022-39188](https://patchblox.com/security/data/cve/CVE-2022-39188.md) | Routine | kernel-rt: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high... | 4.7 | 0.0025 | | | [CVE-2022-3707](https://patchblox.com/security/data/cve/CVE-2022-3707.md) | Routine | kernel-debug-modules-extra: The kernel packages contain the Linux kernel, the core of any Linux operating system. The following packages have be... | 5.5 | 0.0023 | | | [CVE-2021-47592](https://patchblox.com/security/data/cve/CVE-2021-47592.md) | Routine | kernel-rt-kvm: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high... | 5.5 | 0.0021 | | | [CVE-2023-1195](https://patchblox.com/security/data/cve/CVE-2023-1195.md) | Routine | kernel-debug-modules: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * use-after... | 5.5 | 0.0021 | | | [CVE-2023-2177](https://patchblox.com/security/data/cve/CVE-2023-2177.md) | Routine | kernel-64k: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * use-after... | 5.5 | 0.0021 | | | [CVE-2022-21505](https://patchblox.com/security/data/cve/CVE-2022-21505.md) | Routine | kernel-rt: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high... | 6.7 | 0.0020 | | | [CVE-2023-1382](https://patchblox.com/security/data/cve/CVE-2023-1382.md) | Routine | kernel-debug-modules: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * use-after... | 5.5 | 0.0019 | | | [CVE-2022-4129](https://patchblox.com/security/data/cve/CVE-2022-4129.md) | Routine | kernel-rt-kvm: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high... | 5.5 | 0.0018 | | --- Data as of 2026-11-07T06:34:28Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo