Linux · Security advisory · May 10, 2022

ALSA-2022:1988: Security update for 20 packages

ALSA-2022:1988, released May 10, 2022, fixes 40 CVEs across 20 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
40
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.7325
99th percentile

Priority of the 40 CVEs

Patch now 0 Urgent 0 High 40 Routine 0

Fixed package versions

ProductReleaseFixed in
bpftoolalmalinux 84.18.0-372.9.1.el8
kernelalmalinux 84.18.0-372.9.1.el8
kernel-abi-stablelistsalmalinux 84.18.0-372.9.1.el8
kernel-corealmalinux 84.18.0-372.9.1.el8
kernel-cross-headersalmalinux 84.18.0-372.9.1.el8
kernel-debugalmalinux 84.18.0-372.9.1.el8
kernel-debug-corealmalinux 84.18.0-372.9.1.el8
kernel-debug-develalmalinux 84.18.0-372.9.1.el8
kernel-debug-modulesalmalinux 84.18.0-372.9.1.el8
kernel-debug-modules-extraalmalinux 84.18.0-372.9.1.el8
kernel-develalmalinux 84.18.0-372.9.1.el8
kernel-docalmalinux 84.18.0-372.9.1.el8
kernel-headersalmalinux 84.18.0-372.9.1.el8
kernel-modulesalmalinux 84.18.0-372.9.1.el8
kernel-modules-extraalmalinux 84.18.0-372.9.1.el8
kernel-toolsalmalinux 84.18.0-372.9.1.el8
kernel-tools-libsalmalinux 84.18.0-372.9.1.el8
kernel-tools-libs-develalmalinux 84.18.0-372.9.1.el8
perfalmalinux 84.18.0-372.9.1.el8
python3-perfalmalinux 84.18.0-372.9.1.el8

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2017-5715 amd64-microcode: Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized di... n/a 0.7325 None reported
High CVE-2021-20322 kernel-debug-core: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: f... 8.2 0.0690 None reported
High CVE-2021-3773 perf: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: f... 9.8 0.0528 None reported
High CVE-2021-45485 bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: f... 8.2 0.0382 None reported
High CVE-2021-4203 bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: f... 8.2 0.0175 None reported
High CVE-2021-3752 bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: f... 8.2 0.0174 None reported
High CVE-2021-4157 bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: f... 8.2 0.0158 None reported
High CVE-2021-3772 bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: f... 8.2 0.0124 None reported
High CVE-2022-1011 kernel-abi-stablelists: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: f... 8.2 0.0117 None reported
High CVE-2018-13405 kernel-tools-libs-devel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: f... n/a 0.0104 None reported
High CVE-2021-29154 bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: f... 8.2 0.0093 None reported
High CVE-2021-44733 bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: f... 8.2 0.0075 None reported
High CVE-2021-3743 kernel-rt-core: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high... 8.2 0.0072 None reported
High CVE-2021-43389 bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: f... 8.2 0.0072 None reported
High CVE-2021-43976 kernel-debug: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: f... 8.2 0.0069 None reported
High CVE-2021-3612 kernel-rt-debug-devel: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high... 8.2 0.0069 None reported
High CVE-2020-13974 bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: f... 8.2 0.0057 None reported
High CVE-2021-4197 kernel-rt-devel: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high... 8.2 0.0054 None reported
High CVE-2021-3744 bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: f... 8.2 0.0053 None reported
High CVE-2022-0286 bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: f... 8.2 0.0053 None reported
High CVE-2021-4002 bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: f... 8.2 0.0052 None reported
High CVE-2022-0001 Intel: CVE-2022-0001 Branch History Injection 8.2 0.0051 Exploitation Less Likely
High CVE-2020-27820 bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: f... 8.2 0.0050 None reported
High CVE-2021-21781 bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: f... 8.2 0.0050 None reported
High CVE-2021-42739 bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: f... 8.2 0.0047 None reported
Showing 1 to 25 of 40 1Next