Linux · Security advisory · November 14, 2023

ALSA-2023:7077: Security update for 25 packages

ALSA-2023:7077, released November 14, 2023, fixes 53 CVEs across 25 products. None of them is reported as exploited. Patch Radar priority: High.

High

CVEs closed

None rated Critical

Exploited

None reported

Exploitation more likely

Vendor assessment

Highest EPSS

0.0315

87th percentile

Priority of the 53 CVEs

Patch now 0
                                Urgent 0
                                High 22
                                Routine 31

Fixed package versions

Product	Release	Fixed in
bpftool	almalinux 8	4.18.0-513.5.1.el8_9
kernel	almalinux 8	4.18.0-513.5.1.el8_9
kernel-abi-stablelists	almalinux 8	4.18.0-513.5.1.el8_9
kernel-core	almalinux 8	4.18.0-513.5.1.el8_9
kernel-cross-headers	almalinux 8	4.18.0-513.5.1.el8_9
kernel-debug	almalinux 8	4.18.0-513.5.1.el8_9
kernel-debug-core	almalinux 8	4.18.0-513.5.1.el8_9
kernel-debug-devel	almalinux 8	4.18.0-513.5.1.el8_9
kernel-debug-modules	almalinux 8	4.18.0-513.5.1.el8_9
kernel-debug-modules-extra	almalinux 8	4.18.0-513.5.1.el8_9
kernel-devel	almalinux 8	4.18.0-513.5.1.el8_9
kernel-doc	almalinux 8	4.18.0-513.5.1.el8_9
kernel-headers	almalinux 8	4.18.0-513.5.1.el8_9
kernel-modules	almalinux 8	4.18.0-513.5.1.el8_9
kernel-modules-extra	almalinux 8	4.18.0-513.5.1.el8_9
kernel-tools	almalinux 8	4.18.0-513.5.1.el8_9
kernel-tools-libs	almalinux 8	4.18.0-513.5.1.el8_9
kernel-tools-libs-devel	almalinux 8	4.18.0-513.5.1.el8_9
kernel-zfcpdump	almalinux 8	4.18.0-513.5.1.el8_9
kernel-zfcpdump-core	almalinux 8	4.18.0-513.5.1.el8_9
kernel-zfcpdump-devel	almalinux 8	4.18.0-513.5.1.el8_9
kernel-zfcpdump-modules	almalinux 8	4.18.0-513.5.1.el8_9
kernel-zfcpdump-modules-extra	almalinux 8	4.18.0-513.5.1.el8_9
perf	almalinux 8	4.18.0-513.5.1.el8_9
python3-perf	almalinux 8	4.18.0-513.5.1.el8_9

CVEs this fix closes

Priority	CVE	Title	CVSS	EPSS	Exploitation
High	CVE-2023-1998	bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: t...	7.8	0.0138	None reported
High	CVE-2022-3640	kernel-devel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: t...	8.8	0.0121	None reported
High	CVE-2023-0458	kernel-abi-stablelists: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: t...	7.8	0.0073	None reported
High	CVE-2023-31436	kernel-abi-stablelists: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: t...	7.8	0.0060	None reported
High	CVE-2023-4206	linux: A use-after-free vulnerability in the Linux kernel's net/sched: cls_route component can be exploited to achieve local...	7.8	0.0059	None reported
High	CVE-2023-3268	kernel-abi-stablelists: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: t...	7.1	0.0052	None reported
High	CVE-2023-3609	linux: A use-after-free vulnerability in the Linux kernel's net/sched: cls_u32 component can be exploited to achieve local p...	7.8	0.0049	None reported
High	CVE-2022-4744	kernel-devel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: t...	7.8	0.0046	None reported
High	CVE-2023-1989	python3-perf: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: t...	7.0	0.0044	None reported
High	CVE-2023-3141	kernel-abi-stablelists: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: t...	7.1	0.0043	None reported
High	CVE-2023-4207	linux: A use-after-free vulnerability in the Linux kernel's net/sched: cls_fw component can be exploited to achieve local pr...	7.8	0.0031	None reported
High	CVE-2023-4208	kernel-rt: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high...	7.8	0.0031	None reported
High	CVE-2023-0597	kernel-abi-stablelists: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: t...	7.0	0.0030	None reported
High	CVE-2023-3611	kernel-rt-modules-extra: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high...	7.8	0.0029	None reported
High	CVE-2023-1118	bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: t...	7.8	0.0028	None reported
High	CVE-2022-45869	kernel-devel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: t...	7.8	0.0026	None reported
High	CVE-2023-2513	kernel-abi-stablelists: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: t...	7.0	0.0024	None reported
High	CVE-2023-0590	kernel-abi-stablelists: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: t...	7.0	0.0023	None reported
High	CVE-2023-1252	kernel-devel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: t...	7.8	0.0022	None reported
High	CVE-2023-35823	linux: An issue was discovered in the Linux kernel before 6.3.2	7.0	0.0020	None reported
High	CVE-2023-35824	linux: An issue was discovered in the Linux kernel before 6.3.2	7.0	0.0020	None reported
High	CVE-2023-4128	kernel-abi-stablelists: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: t...	7.8	n/a	None reported
Routine	CVE-2022-3594	kernel-devel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: t...	5.3	0.0315	None reported
Routine	CVE-2022-40982	intel-microcode: Information exposure through microarchitectural state after transient execution in certain vector execution units for...	6.5	0.0305	None reported
Routine	CVE-2023-28772	kernel-abi-stablelists: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: t...	6.7	0.0072	None reported

Also fixes CVE-2023-1998

RHSA-2023:7077
bpftool, kernel, kernel-abi-stablelists and 20 more on RHEL 8
RHSA-2023:6901
kernel-rt, kernel-rt-core, kernel-rt-debug and 9 more on RHEL 8
ELSA-2023-7077
bpftool, kernel, kernel-abi-stablelists and 17 more on ol 8
ALAS2023-2023-138
bpftool, bpftool-debuginfo, kernel and 16 more on amzn 2023
RLSA-2023:4378
kernel-rt on rocky 9
ELSA-2023-4377
bpftool, kernel, kernel-abi-stablelists and 24 more on ol 9
ALSA-2023:4377
bpftool, kernel, kernel-64k and 44 more on almalinux 9
ALSA-2023:4378
kernel-rt, kernel-rt-core, kernel-rt-debug and 11 more on almalinux 9

Vendor advisory

https://osv.dev/vulnerability/ALSA-2023:7077

For tools and AI agents

This page as data: JSON · Markdown

Which servers are still behind?

Patchblox compares the installed package on every Linux machine against the fixed version for its release, including machines reported through Azure Update Manager.

Get a demo