Linux · Security advisory · November 15, 2022

ALSA-2022:8267: Security update for 28 packages

ALSA-2022:8267, released November 15, 2022, fixes 31 CVEs across 28 products. One of them is being exploited (CVE-2022-2586); 1 on CISA KEV. Patch Radar priority: Patch now.

Patch now1 on CISA KEV

CVEs closed

None rated Critical

Exploited

CVE-2022-2586

Exploitation more likely

Vendor assessment

Highest EPSS

0.1020

95th percentile

Priority of the 31 CVEs

Patch now 1
                                Urgent 0
                                High 26
                                Routine 4

Fixed package versions

Product	Release	Fixed in
bpftool	almalinux 9	5.14.0-162.6.1.el9_1
kernel	almalinux 9	5.14.0-162.6.1.el9_1
kernel-abi-stablelists	almalinux 9	5.14.0-162.6.1.el9_1
kernel-core	almalinux 9	5.14.0-162.6.1.el9_1
kernel-cross-headers	almalinux 9	5.14.0-162.6.1.el9_1
kernel-debug	almalinux 9	5.14.0-162.6.1.el9_1
kernel-debug-core	almalinux 9	5.14.0-162.6.1.el9_1
kernel-debug-devel	almalinux 9	5.14.0-162.6.1.el9_1
kernel-debug-devel-matched	almalinux 9	5.14.0-162.6.1.el9_1
kernel-debug-modules	almalinux 9	5.14.0-162.6.1.el9_1
kernel-debug-modules-extra	almalinux 9	5.14.0-162.6.1.el9_1
kernel-devel	almalinux 9	5.14.0-162.6.1.el9_1
kernel-devel-matched	almalinux 9	5.14.0-162.6.1.el9_1
kernel-doc	almalinux 9	5.14.0-162.6.1.el9_1
kernel-headers	almalinux 9	5.14.0-162.6.1.el9_1
kernel-modules	almalinux 9	5.14.0-162.6.1.el9_1
kernel-modules-extra	almalinux 9	5.14.0-162.6.1.el9_1
kernel-tools	almalinux 9	5.14.0-162.6.1.el9_1
kernel-tools-libs	almalinux 9	5.14.0-162.6.1.el9_1
kernel-tools-libs-devel	almalinux 9	5.14.0-162.6.1.el9_1
kernel-zfcpdump	almalinux 9	5.14.0-162.6.1.el9_1
kernel-zfcpdump-core	almalinux 9	5.14.0-162.6.1.el9_1
kernel-zfcpdump-devel	almalinux 9	5.14.0-162.6.1.el9_1
kernel-zfcpdump-devel-matched	almalinux 9	5.14.0-162.6.1.el9_1
kernel-zfcpdump-modules	almalinux 9	5.14.0-162.6.1.el9_1
kernel-zfcpdump-modules-extra	almalinux 9	5.14.0-162.6.1.el9_1
perf	almalinux 9	5.14.0-162.6.1.el9_1
python3-perf	almalinux 9	5.14.0-162.6.1.el9_1

CVEs this fix closes

Priority	CVE	Title	CVSS	EPSS	Exploitation
Patch now	CVE-2022-2586	kernel-rt: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high...	7.8	0.1020	KEVExploited
High	CVE-2022-36946	kernel-rt: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high...	7.8	0.0887	None reported
High	CVE-2022-29901	bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * A use-aft...	7.8	0.0501	None reported
High	CVE-2022-29900	AMD: CVE-2022-29900 AMD CPU Branch Type Confusion	7.8	0.0394	Exploitation Less Likely
High	CVE-2022-29581	kernel-rt-devel: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high...	7.8	0.0093	None reported
High	CVE-2022-2639	kernel-rt-kvm: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high...	7.8	0.0092	None reported
High	CVE-2022-1679	kernel-tools-libs-devel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * off-path...	7.8	0.0081	None reported
High	CVE-2022-23825	AMD: CVE-2022-23825 AMD CPU Branch Type Confusion	7.8	0.0079	Exploitation Less Likely
High	CVE-2020-36516	kernel-modules-extra: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * off-path...	7.8	0.0067	None reported
High	CVE-2022-21499	bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * off-path...	7.8	0.0062	None reported
High	CVE-2022-0617	kernel-rt: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high...	7.8	0.0050	None reported
High	CVE-2022-0854	kernel-rt-devel: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high...	7.8	0.0046	None reported
High	CVE-2022-1016	kernel-rt-debug-modules-extra: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high...	7.8	0.0044	None reported
High	CVE-2022-28893	kernel-debug-modules-extra: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * off-path...	7.8	0.0041	None reported
High	CVE-2022-1353	kernel-tools-libs-devel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * off-path...	7.8	0.0040	None reported
High	CVE-2022-24448	kernel-rt: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high...	7.8	0.0040	None reported
High	CVE-2021-3640	kernel-debug-devel-matched: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * off-path...	7.8	0.0037	None reported
High	CVE-2022-26373	kernel-rt: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high...	7.8	0.0037	None reported
High	CVE-2022-28390	kernel-zfcpdump-core: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * off-path...	7.8	0.0036	None reported
High	CVE-2022-1998	kernel-tools-libs-devel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * off-path...	7.8	0.0034	None reported
High	CVE-2022-1852	kernel-tools-libs-devel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * off-path...	7.8	0.0033	None reported
High	CVE-2022-1184	kernel-tools-libs-devel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * off-path...	7.8	0.0029	None reported
High	CVE-2022-1280	kernel-zfcpdump: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * off-path...	7.0	0.0028	None reported
High	CVE-2022-0168	bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * off-path...	7.8	0.0027	None reported
High	CVE-2022-1048	kernel-rt: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high...	7.8	0.0024	None reported

Also fixes CVE-2022-2586

ALAS2023-2023-070
bpftool, bpftool-debuginfo, kernel and 16 more on amzn 2023
RHSA-2022:8267
bpftool, kernel, kernel-abi-stablelists and 23 more on RHEL 9
RHSA-2022:7683
bpftool, kernel, kernel-abi-stablelists and 20 more on RHEL 8
RHSA-2022:7933
kernel-rt, kernel-rt-core, kernel-rt-debug and 9 more on RHEL 9
RHSA-2022:7444
kernel-rt, kernel-rt-core, kernel-rt-debug and 9 more on RHEL 8
ELSA-2022-8267
bpftool, kernel, kernel-abi-stablelists and 19 more on ol 9
ALSA-2022:7933
kernel-rt, kernel-rt-core, kernel-rt-debug and 9 more on almalinux 9
RLSA-2022:7683
kernel on rocky 8

Vendor advisory

https://osv.dev/vulnerability/ALSA-2022:8267

For tools and AI agents

This page as data: JSON · Markdown

Which servers are still behind?

Patchblox compares the installed package on every Linux machine against the fixed version for its release, including machines reported through Azure Update Manager.

Get a demo