Linux · Security advisory · May 13, 2023

DSA-5402-1: linux security update

DSA-5402-1, released May 13, 2023, fixes 1 CVE in linux (version 5.10.179-1). One of them is being exploited (CVE-2023-0386); 1 on CISA KEV. Patch Radar priority: Patch now. The product is no longer supported.

Patch now1 on CISA KEVUnsupported product

CVEs closed

None rated Critical

Exploited

CVE-2023-0386

Exploitation more likely

Vendor assessment

Highest EPSS

0.0788

94th percentile

Fixed package versions

Product	Release	Fixed in
linux	Debian 11.6 (bullseye)	5.10.179-1

CVEs this fix closes

Priority	CVE	Title	Impact	CVSS	EPSS	Exploitation
Patch now	CVE-2023-0386	bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: s...		7.8	0.0788	KEVExploited

Also fixes CVE-2023-0386

RXSA-2023:1566
kernel on rocky 8
RLSA-2023:1584
kernel-rt on rocky 8
ELSA-2023-1566
bpftool, kernel, kernel-abi-stablelists and 17 more on ol 8
RHSA-2023:1659
kpatch-patch-4_18_0-425_10_1, kpatch-patch-4_18_0-425_13_1, kpatch-patch-4_18_0-425_3_1 on RHEL 8
ALSA-2023:1566
bpftool, kernel, kernel-abi-stablelists and 21 more on almalinux 8
ALSA-2023:1584
kernel-rt, kernel-rt-core, kernel-rt-debug and 9 more on almalinux 8
RHSA-2023:1566
bpftool, kernel, kernel-abi-stablelists and 20 more on RHEL 8
RHSA-2023:1584
kernel-rt, kernel-rt-core, kernel-rt-debug and 9 more on RHEL 8

Vendor advisory

https://security-tracker.debian.org/tracker/CVE-2023-0386

For tools and AI agents

This page as data: JSON · Markdown

Which servers are still behind?

Patchblox compares the installed package on every Linux machine against the fixed version for its release, including machines reported through Azure Update Manager.

Get a demo