Linux · Security advisory · February 28, 2023

ALSA-2023:0951: Security update for 27 packages

ALSA-2023:0951, released February 28, 2023, fixes 5 CVEs across 27 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
5
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0663
93rd percentile

Priority of the 5 CVEs

Patch now 0 Urgent 0 High 5 Routine 0

Fixed package versions

ProductReleaseFixed in
bpftoolalmalinux 95.14.0-162.18.1.el9_1
kernelalmalinux 95.14.0-162.18.1.el9_1
kernel-abi-stablelistsalmalinux 95.14.0-162.18.1.el9_1
kernel-corealmalinux 95.14.0-162.18.1.el9_1
kernel-cross-headersalmalinux 95.14.0-162.18.1.el9_1
kernel-debugalmalinux 95.14.0-162.18.1.el9_1
kernel-debug-corealmalinux 95.14.0-162.18.1.el9_1
kernel-debug-develalmalinux 95.14.0-162.18.1.el9_1
kernel-debug-devel-matchedalmalinux 95.14.0-162.18.1.el9_1
kernel-debug-modulesalmalinux 95.14.0-162.18.1.el9_1
kernel-debug-modules-extraalmalinux 95.14.0-162.18.1.el9_1
kernel-develalmalinux 95.14.0-162.18.1.el9_1
kernel-devel-matchedalmalinux 95.14.0-162.18.1.el9_1
kernel-docalmalinux 95.14.0-162.18.1.el9_1
kernel-modulesalmalinux 95.14.0-162.18.1.el9_1
kernel-modules-extraalmalinux 95.14.0-162.18.1.el9_1
kernel-toolsalmalinux 95.14.0-162.18.1.el9_1
kernel-tools-libsalmalinux 95.14.0-162.18.1.el9_1
kernel-tools-libs-develalmalinux 95.14.0-162.18.1.el9_1
kernel-zfcpdumpalmalinux 95.14.0-162.18.1.el9_1
kernel-zfcpdump-corealmalinux 95.14.0-162.18.1.el9_1
kernel-zfcpdump-develalmalinux 95.14.0-162.18.1.el9_1
kernel-zfcpdump-devel-matchedalmalinux 95.14.0-162.18.1.el9_1
kernel-zfcpdump-modulesalmalinux 95.14.0-162.18.1.el9_1
kernel-zfcpdump-modules-extraalmalinux 95.14.0-162.18.1.el9_1
perfalmalinux 95.14.0-162.18.1.el9_1
python3-perfalmalinux 95.14.0-162.18.1.el9_1

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2022-4379 bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: u... 7.8 0.0663 None reported
High CVE-2023-0179 bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: u... 7.8 0.0194 None reported
High CVE-2022-3564 kernel-rt: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high... 7.8 0.0146 None reported
High CVE-2022-4378 kernel-abi-stablelists: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: s... 7.8 0.0044 None reported
High CVE-2022-2873 kernel-doc: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: m... 7.8 0.0032 None reported
Showing 1 to 5 of 5 1