# RHSA-2023:6901: Security update for 12 packages RHSA-2023:6901, released November 14, 2023, fixes 53 CVEs across 12 products. None of them is reported as exploited. Patch Radar priority: High. - Web page: https://patchblox.com/security/fix/linux/rhsa-2023-6901 - Platform: Linux - Released: Nov 14, 2023 - Priority: High (Closes CVE-2023-1998, high severity) - CVEs: 53, exploited: 0, on CISA KEV: 0 - Vendor advisory: https://access.redhat.com/errata/RHSA-2023:6901 ## Applies to | Product | Release | Fixed in | |---|---|---| | [kernel-rt](https://patchblox.com/security/data/product/linux/kernel-rt.md) | RHEL 8 | 0:4.18.0-513.5.1.rt7.307.el8_9 | | [kernel-rt-core](https://patchblox.com/security/data/product/linux/kernel-rt-core.md) | RHEL 8 | 0:4.18.0-513.5.1.rt7.307.el8_9 | | [kernel-rt-debug](https://patchblox.com/security/data/product/linux/kernel-rt-debug.md) | RHEL 8 | 0:4.18.0-513.5.1.rt7.307.el8_9 | | [kernel-rt-debug-core](https://patchblox.com/security/data/product/linux/kernel-rt-debug-core.md) | RHEL 8 | 0:4.18.0-513.5.1.rt7.307.el8_9 | | [kernel-rt-debug-devel](https://patchblox.com/security/data/product/linux/kernel-rt-debug-devel.md) | RHEL 8 | 0:4.18.0-513.5.1.rt7.307.el8_9 | | [kernel-rt-debug-kvm](https://patchblox.com/security/data/product/linux/kernel-rt-debug-kvm.md) | RHEL 8 | 0:4.18.0-513.5.1.rt7.307.el8_9 | | [kernel-rt-debug-modules](https://patchblox.com/security/data/product/linux/kernel-rt-debug-modules.md) | RHEL 8 | 0:4.18.0-513.5.1.rt7.307.el8_9 | | [kernel-rt-debug-modules-extra](https://patchblox.com/security/data/product/linux/kernel-rt-debug-modules-extra.md) | RHEL 8 | 0:4.18.0-513.5.1.rt7.307.el8_9 | | [kernel-rt-devel](https://patchblox.com/security/data/product/linux/kernel-rt-devel.md) | RHEL 8 | 0:4.18.0-513.5.1.rt7.307.el8_9 | | [kernel-rt-kvm](https://patchblox.com/security/data/product/linux/kernel-rt-kvm.md) | RHEL 8 | 0:4.18.0-513.5.1.rt7.307.el8_9 | | [kernel-rt-modules](https://patchblox.com/security/data/product/linux/kernel-rt-modules.md) | RHEL 8 | 0:4.18.0-513.5.1.rt7.307.el8_9 | | [kernel-rt-modules-extra](https://patchblox.com/security/data/product/linux/kernel-rt-modules-extra.md) | RHEL 8 | 0:4.18.0-513.5.1.rt7.307.el8_9 | ## CVEs this fix closes | CVE | Priority | Title | CVSS | EPSS | Exploitation | |---|---|---|---:|---:|---| | [CVE-2023-1998](https://patchblox.com/security/data/cve/CVE-2023-1998.md) | High | bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: t... | 7.8 | 0.0138 | | | [CVE-2022-3640](https://patchblox.com/security/data/cve/CVE-2022-3640.md) | High | kernel-devel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: t... | 8.8 | 0.0121 | | | [CVE-2023-0458](https://patchblox.com/security/data/cve/CVE-2023-0458.md) | High | kernel-abi-stablelists: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: t... | 7.8 | 0.0073 | | | [CVE-2023-31436](https://patchblox.com/security/data/cve/CVE-2023-31436.md) | High | kernel-abi-stablelists: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: t... | 7.8 | 0.0060 | | | [CVE-2023-4206](https://patchblox.com/security/data/cve/CVE-2023-4206.md) | High | linux: A use-after-free vulnerability in the Linux kernel's net/sched: cls_route component can be exploited to achieve local... | 7.8 | 0.0059 | | | [CVE-2023-3268](https://patchblox.com/security/data/cve/CVE-2023-3268.md) | High | kernel-abi-stablelists: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: t... | 7.1 | 0.0052 | | | [CVE-2023-3609](https://patchblox.com/security/data/cve/CVE-2023-3609.md) | High | linux: A use-after-free vulnerability in the Linux kernel's net/sched: cls_u32 component can be exploited to achieve local p... | 7.8 | 0.0049 | | | [CVE-2022-4744](https://patchblox.com/security/data/cve/CVE-2022-4744.md) | High | kernel-devel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: t... | 7.8 | 0.0046 | | | [CVE-2023-1989](https://patchblox.com/security/data/cve/CVE-2023-1989.md) | High | python3-perf: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: t... | 7.0 | 0.0044 | | | [CVE-2023-3141](https://patchblox.com/security/data/cve/CVE-2023-3141.md) | High | kernel-abi-stablelists: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: t... | 7.1 | 0.0043 | | | [CVE-2023-4207](https://patchblox.com/security/data/cve/CVE-2023-4207.md) | High | linux: A use-after-free vulnerability in the Linux kernel's net/sched: cls_fw component can be exploited to achieve local pr... | 7.8 | 0.0031 | | | [CVE-2023-4208](https://patchblox.com/security/data/cve/CVE-2023-4208.md) | High | kernel-rt: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high... | 7.8 | 0.0031 | | | [CVE-2023-0597](https://patchblox.com/security/data/cve/CVE-2023-0597.md) | High | kernel-abi-stablelists: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: t... | 7.0 | 0.0030 | | | [CVE-2023-3611](https://patchblox.com/security/data/cve/CVE-2023-3611.md) | High | kernel-rt-modules-extra: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high... | 7.8 | 0.0029 | | | [CVE-2023-1118](https://patchblox.com/security/data/cve/CVE-2023-1118.md) | High | bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: t... | 7.8 | 0.0028 | | | [CVE-2022-45869](https://patchblox.com/security/data/cve/CVE-2022-45869.md) | High | kernel-devel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: t... | 7.8 | 0.0026 | | | [CVE-2023-2513](https://patchblox.com/security/data/cve/CVE-2023-2513.md) | High | kernel-abi-stablelists: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: t... | 7.0 | 0.0024 | | | [CVE-2023-0590](https://patchblox.com/security/data/cve/CVE-2023-0590.md) | High | kernel-abi-stablelists: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: t... | 7.0 | 0.0023 | | | [CVE-2023-1252](https://patchblox.com/security/data/cve/CVE-2023-1252.md) | High | kernel-devel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: t... | 7.8 | 0.0022 | | | [CVE-2023-35823](https://patchblox.com/security/data/cve/CVE-2023-35823.md) | High | linux: An issue was discovered in the Linux kernel before 6.3.2 | 7.0 | 0.0020 | | | [CVE-2023-35824](https://patchblox.com/security/data/cve/CVE-2023-35824.md) | High | linux: An issue was discovered in the Linux kernel before 6.3.2 | 7.0 | 0.0020 | | | [CVE-2023-4128](https://patchblox.com/security/data/cve/CVE-2023-4128.md) | High | kernel-abi-stablelists: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: t... | 7.8 | n/a | | | [CVE-2022-3594](https://patchblox.com/security/data/cve/CVE-2022-3594.md) | Routine | kernel-devel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: t... | 5.3 | 0.0315 | | | [CVE-2022-40982](https://patchblox.com/security/data/cve/CVE-2022-40982.md) | Routine | intel-microcode: Information exposure through microarchitectural state after transient execution in certain vector execution units for... | 6.5 | 0.0305 | | | [CVE-2023-28772](https://patchblox.com/security/data/cve/CVE-2023-28772.md) | Routine | kernel-abi-stablelists: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: t... | 6.7 | 0.0072 | | | [CVE-2022-40133](https://patchblox.com/security/data/cve/CVE-2022-40133.md) | Routine | kernel-devel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: t... | 5.5 | 0.0063 | | | [CVE-2023-1206](https://patchblox.com/security/data/cve/CVE-2023-1206.md) | Routine | kernel-rt: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high... | 5.7 | 0.0063 | | | [CVE-2022-38457](https://patchblox.com/security/data/cve/CVE-2022-38457.md) | Routine | kernel-devel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: t... | 5.5 | 0.0058 | | | [CVE-2021-43975](https://patchblox.com/security/data/cve/CVE-2021-43975.md) | Routine | kernel-devel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: t... | 6.7 | 0.0055 | | | [CVE-2022-42895](https://patchblox.com/security/data/cve/CVE-2022-42895.md) | Routine | kernel-devel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: t... | 6.5 | 0.0048 | | | [CVE-2023-3772](https://patchblox.com/security/data/cve/CVE-2023-3772.md) | Routine | kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu... | 5.5 | 0.0048 | | | [CVE-2023-30456](https://patchblox.com/security/data/cve/CVE-2023-30456.md) | Routine | linux: An issue was discovered in arch/x86/kvm/vmx/nested.c in the Linux kernel before 6.2.8 | 6.5 | 0.0047 | | | [CVE-2023-33952](https://patchblox.com/security/data/cve/CVE-2023-33952.md) | Routine | linux: A double-free vulnerability was found in handling vmw_buffer_object objects in the vmwgfx driver in the Linux kernel | 6.7 | 0.0047 | | | [CVE-2023-1079](https://patchblox.com/security/data/cve/CVE-2023-1079.md) | Routine | bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: t... | 6.8 | 0.0045 | | | [CVE-2023-31084](https://patchblox.com/security/data/cve/CVE-2023-31084.md) | Routine | kernel-rt-debug-modules-extra: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high... | 5.5 | 0.0041 | | | [CVE-2022-28388](https://patchblox.com/security/data/cve/CVE-2022-28388.md) | Routine | kernel-devel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: t... | 5.5 | 0.0040 | | | [CVE-2023-33203](https://patchblox.com/security/data/cve/CVE-2023-33203.md) | Routine | linux: The Linux kernel before 6.2.9 has a race condition and resultant use-after-free in drivers/net/ethernet/qualcomm/emac... | 6.4 | 0.0035 | | | [CVE-2023-33951](https://patchblox.com/security/data/cve/CVE-2023-33951.md) | Routine | linux: A race condition vulnerability was found in the vmwgfx driver in the Linux kernel | 6.7 | 0.0034 | | | [CVE-2023-26545](https://patchblox.com/security/data/cve/CVE-2023-26545.md) | Routine | kernel-abi-stablelists: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: t... | 4.7 | 0.0033 | | | [CVE-2022-45887](https://patchblox.com/security/data/cve/CVE-2022-45887.md) | Routine | kernel-devel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: t... | 4.7 | 0.0030 | | | [CVE-2023-23455](https://patchblox.com/security/data/cve/CVE-2023-23455.md) | Routine | kernel-abi-stablelists: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: t... | 5.5 | 0.0028 | | | [CVE-2023-3212](https://patchblox.com/security/data/cve/CVE-2023-3212.md) | Routine | kernel-abi-stablelists: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: t... | 4.4 | 0.0028 | | | [CVE-2023-4132](https://patchblox.com/security/data/cve/CVE-2023-4132.md) | Routine | linux: A use-after-free vulnerability was found in the siano smsusb module in the Linux kernel | 5.5 | 0.0025 | | | [CVE-2023-1074](https://patchblox.com/security/data/cve/CVE-2023-1074.md) | Routine | kernel-rt-modules: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high... | 5.5 | 0.0024 | | | [CVE-2023-1855](https://patchblox.com/security/data/cve/CVE-2023-1855.md) | Routine | kernel-tools: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: t... | 6.4 | 0.0023 | | | [CVE-2023-2269](https://patchblox.com/security/data/cve/CVE-2023-2269.md) | Routine | kernel-debug-modules-extra: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: t... | 4.4 | 0.0022 | | | [CVE-2023-28328](https://patchblox.com/security/data/cve/CVE-2023-28328.md) | Routine | kernel-abi-stablelists: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: t... | 5.5 | 0.0022 | | | [CVE-2023-1075](https://patchblox.com/security/data/cve/CVE-2023-1075.md) | Routine | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: t... | 3.3 | 0.0022 | | | [CVE-2023-3161](https://patchblox.com/security/data/cve/CVE-2023-3161.md) | Routine | linux: A flaw was found in the Framebuffer Console (fbcon) in the Linux Kernel | 5.5 | 0.0020 | | | [CVE-2023-1382](https://patchblox.com/security/data/cve/CVE-2023-1382.md) | Routine | kernel-debug-modules: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * use-after... | 5.5 | 0.0019 | | | [CVE-2023-4732](https://patchblox.com/security/data/cve/CVE-2023-4732.md) | Routine | kernel-abi-stablelists: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: t... | 4.7 | 0.0018 | | | [CVE-2023-4155](https://patchblox.com/security/data/cve/CVE-2023-4155.md) | Routine | kernel-rt-debug-devel: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high... | 5.6 | 0.0017 | | | [CVE-2023-35825](https://patchblox.com/security/data/cve/CVE-2023-35825.md) | Routine | kernel-abi-stablelists: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: t... | 6.4 | n/a | | --- Data as of 2026-11-07T06:34:28Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo