Linux · Security advisory · March 11, 2022

ELSA-2022-0825: Security update for 20 packages

ELSA-2022-0825, released March 11, 2022, fixes 8 CVEs across 20 products. 3 of them are being exploited (CVE-2022-0847); 3 on CISA KEV. Patch Radar priority: Patch now.

Patch now3 on CISA KEV

CVEs closed

None rated Critical

Exploited

CVE-2022-0847

Exploitation more likely

Vendor assessment

Highest EPSS

0.9280

99th percentile

Priority of the 8 CVEs

Patch now 3
                                Urgent 0
                                High 5
                                Routine 0

Fixed package versions

Product	Release	Fixed in
bpftool	ol 8	0:4.18.0-348.20.1.el8_5
kernel	ol 8	0:4.18.0-348.20.1.el8_5
kernel-abi-stablelists	ol 8	0:4.18.0-348.20.1.el8_5
kernel-core	ol 8	0:4.18.0-348.20.1.el8_5
kernel-cross-headers	ol 8	0:4.18.0-348.20.1.el8_5
kernel-debug	ol 8	0:4.18.0-348.20.1.el8_5
kernel-debug-core	ol 8	0:4.18.0-348.20.1.el8_5
kernel-debug-devel	ol 8	0:4.18.0-348.20.1.el8_5
kernel-debug-modules	ol 8	0:4.18.0-348.20.1.el8_5
kernel-debug-modules-extra	ol 8	0:4.18.0-348.20.1.el8_5
kernel-devel	ol 8	0:4.18.0-348.20.1.el8_5
kernel-doc	ol 8	0:4.18.0-348.20.1.el8_5
kernel-headers	ol 8	0:4.18.0-348.20.1.el8_5
kernel-modules	ol 8	0:4.18.0-348.20.1.el8_5
kernel-modules-extra	ol 8	0:4.18.0-348.20.1.el8_5
kernel-tools	ol 8	0:4.18.0-348.20.1.el8_5
kernel-tools-libs	ol 8	0:4.18.0-348.20.1.el8_5
kernel-tools-libs-devel	ol 8	0:4.18.0-348.20.1.el8_5
perf	ol 8	0:4.18.0-348.20.1.el8_5
python3-perf	ol 8	0:4.18.0-348.20.1.el8_5

CVEs this fix closes

Priority	CVE	Title	CVSS	EPSS	Exploitation
Patch now	CVE-2022-0847	kernel-doc: The kernel packages contain the Linux kernel, the core of any Linux operating system. The following packages have be...	8.8	0.9280	KEVExploited
Patch now	CVE-2022-0492	kernel-tools-libs-devel: The kernel packages contain the Linux kernel, the core of any Linux operating system. The following packages have be...	8.8	0.0553	KEVExploited
Patch now	CVE-2021-0920	bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. The following packages have be...	8.8	0.0087	KEVExploited
High	CVE-2022-0435	bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. The following packages have be...	8.8	0.6777	None reported
High	CVE-2022-22942	kernel-doc: The kernel packages contain the Linux kernel, the core of any Linux operating system. The following packages have be...	8.8	0.0256	None reported
High	CVE-2021-4154	kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. The following packages have be...	8.8	0.0122	None reported
High	CVE-2022-0330	kernel-tools-libs-devel: The kernel packages contain the Linux kernel, the core of any Linux operating system. The following packages have be...	8.8	0.0038	None reported
High	CVE-2022-0516	kernel-tools-libs-devel: The kernel packages contain the Linux kernel, the core of any Linux operating system. The following packages have be...	8.8	0.0034	None reported

Also fixes CVE-2022-0847

ALAS2023-2023-070
bpftool, bpftool-debuginfo, kernel and 16 more on amzn 2023
ALSA-2022:0825
kernel-tools-libs-devel on almalinux 8
RLSA-2022:0825
kernel on rocky 8
RHSA-2022:0825
bpftool, kernel, kernel-abi-stablelists and 20 more on RHEL 8
RLSA-2022:0819
kernel-rt on rocky 8
RHSA-2022:0819
kernel-rt, kernel-rt-core, kernel-rt-debug and 9 more on RHEL 8
ELSA-2022-9245
kernel-uek-container, kernel-uek-container-debug on ol 8
DEBIAN-CVE-2022-0847
linux on Debian 12.15 (bookworm), Debian 13.5 (trixie), Debian 14

Vendor advisory

https://linux.oracle.com/errata/ELSA-2022-0825.html

For tools and AI agents

This page as data: JSON · Markdown

Which servers are still behind?

Patchblox compares the installed package on every Linux machine against the fixed version for its release, including machines reported through Azure Update Manager.

Get a demo