Linux · Security advisory · February 28, 2023

ALSA-2023:0979: Security update for 12 packages

ALSA-2023:0979, released February 28, 2023, fixes 5 CVEs across 12 products. None of them is reported as exploited. Patch Radar priority: High.

High

CVEs closed

None rated Critical

Exploited

None reported

Exploitation more likely

Vendor assessment

Highest EPSS

0.0663

93rd percentile

Priority of the 5 CVEs

Patch now 0
                                Urgent 0
                                High 5
                                Routine 0

Fixed package versions

Product	Release	Fixed in
kernel-rt	almalinux 9	5.14.0-162.18.1.rt21.181.el9_1
kernel-rt-core	almalinux 9	5.14.0-162.18.1.rt21.181.el9_1
kernel-rt-debug	almalinux 9	5.14.0-162.18.1.rt21.181.el9_1
kernel-rt-debug-core	almalinux 9	5.14.0-162.18.1.rt21.181.el9_1
kernel-rt-debug-devel	almalinux 9	5.14.0-162.18.1.rt21.181.el9_1
kernel-rt-debug-kvm	almalinux 9	5.14.0-162.18.1.rt21.181.el9_1
kernel-rt-debug-modules	almalinux 9	5.14.0-162.18.1.rt21.181.el9_1
kernel-rt-debug-modules-extra	almalinux 9	5.14.0-162.18.1.rt21.181.el9_1
kernel-rt-devel	almalinux 9	5.14.0-162.18.1.rt21.181.el9_1
kernel-rt-kvm	almalinux 9	5.14.0-162.18.1.rt21.181.el9_1
kernel-rt-modules	almalinux 9	5.14.0-162.18.1.rt21.181.el9_1
kernel-rt-modules-extra	almalinux 9	5.14.0-162.18.1.rt21.181.el9_1

CVEs this fix closes

Priority	CVE	Title	CVSS	EPSS	Exploitation
High	CVE-2022-4379	bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: u...	7.8	0.0663	None reported
High	CVE-2023-0179	bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: u...	7.8	0.0194	None reported
High	CVE-2022-3564	kernel-rt: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high...	7.8	0.0146	None reported
High	CVE-2022-4378	kernel-abi-stablelists: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: s...	7.8	0.0044	None reported
High	CVE-2022-2873	kernel-doc: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: m...	7.8	0.0032	None reported

Also fixes CVE-2022-4379

ALAS2023-2023-070
bpftool, bpftool-debuginfo, kernel and 16 more on amzn 2023
RHSA-2023:0951
bpftool, kernel, kernel-abi-stablelists and 23 more on RHEL 9
RXSA-2023:0951
kernel on rocky 9
RLSA-2023:0979
kernel-rt on rocky 9
ELSA-2023-0951
bpftool, kernel, kernel-abi-stablelists and 19 more on ol 9
ALSA-2023:0951
bpftool, kernel, kernel-abi-stablelists and 24 more on almalinux 9
RHSA-2023:0979
kernel-rt, kernel-rt-core, kernel-rt-debug and 9 more on RHEL 9
RHSA-2023:1008
kpatch-patch-5_14_0-162_12_1, kpatch-patch-5_14_0-162_6_1 on RHEL 9

Vendor advisory

https://osv.dev/vulnerability/ALSA-2023:0979

For tools and AI agents

This page as data: JSON · Markdown

Which servers are still behind?

Patchblox compares the installed package on every Linux machine against the fixed version for its release, including machines reported through Azure Update Manager.

Get a demo