Linux · Security advisory · June 30, 2022

ELSA-2022-5249: Security update for 22 packages

ELSA-2022-5249, released June 30, 2022, fixes 4 CVEs across 22 products. None of them is reported as exploited. Patch Radar priority: High.

High

CVEs closed

None rated Critical

Exploited

None reported

Exploitation more likely

Vendor assessment

Highest EPSS

0.0552

92nd percentile

Priority of the 4 CVEs

Patch now 0
                                Urgent 0
                                High 4
                                Routine 0

Fixed package versions

Product	Release	Fixed in
bpftool	ol 9	0:5.14.0-70.17.1.0.1.el9_0
kernel	ol 9	0:5.14.0-70.17.1.0.1.el9_0
kernel-abi-stablelists	ol 9	0:5.14.0-70.17.1.0.1.el9_0
kernel-core	ol 9	0:5.14.0-70.17.1.0.1.el9_0
kernel-cross-headers	ol 9	0:5.14.0-70.17.1.0.1.el9_0
kernel-debug	ol 9	0:5.14.0-70.17.1.0.1.el9_0
kernel-debug-core	ol 9	0:5.14.0-70.17.1.0.1.el9_0
kernel-debug-devel	ol 9	0:5.14.0-70.17.1.0.1.el9_0
kernel-debug-devel-matched	ol 9	0:5.14.0-70.17.1.0.1.el9_0
kernel-debug-modules	ol 9	0:5.14.0-70.17.1.0.1.el9_0
kernel-debug-modules-extra	ol 9	0:5.14.0-70.17.1.0.1.el9_0
kernel-devel	ol 9	0:5.14.0-70.17.1.0.1.el9_0
kernel-devel-matched	ol 9	0:5.14.0-70.17.1.0.1.el9_0
kernel-doc	ol 9	0:5.14.0-70.17.1.0.1.el9_0
kernel-headers	ol 9	0:5.14.0-70.17.1.0.1.el9_0
kernel-modules	ol 9	0:5.14.0-70.17.1.0.1.el9_0
kernel-modules-extra	ol 9	0:5.14.0-70.17.1.0.1.el9_0
kernel-tools	ol 9	0:5.14.0-70.17.1.0.1.el9_0
kernel-tools-libs	ol 9	0:5.14.0-70.17.1.0.1.el9_0
kernel-tools-libs-devel	ol 9	0:5.14.0-70.17.1.0.1.el9_0
perf	ol 9	0:5.14.0-70.17.1.0.1.el9_0
python3-perf	ol 9	0:5.14.0-70.17.1.0.1.el9_0

CVEs this fix closes

Priority	CVE	Title	CVSS	EPSS	Exploitation
High	CVE-2022-27666	kernel-devel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: b...	7.8	0.0552	None reported
High	CVE-2022-1012	bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: Sma...	9.1	0.0439	None reported
High	CVE-2022-1729	bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: r...	7.4	0.0033	None reported
High	CVE-2022-1966	bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: S...	n/a	n/a	None reported

Also fixes CVE-2022-27666

RHSA-2022:5249
bpftool, kernel, kernel-abi-stablelists and 23 more on RHEL 9
ELSA-2022-9365
kernel-uek, kernel-uek-debug, kernel-uek-debug-devel and 6 more on ol 8
ELSA-2022-9368
kernel-uek-container, kernel-uek-container-debug on ol 8
RHSA-2022:5267
kernel-rt, kernel-rt-core, kernel-rt-debug and 9 more on RHEL 9
ALSA-2022:5249
bpftool, kernel, kernel-abi-stablelists and 25 more on almalinux 9
ALSA-2022:5267
kernel-rt, kernel-rt-core, kernel-rt-debug and 9 more on almalinux 9
RHSA-2022:5214
kpatch-patch-5_14_0-70_13_1 on RHEL 9
ELSA-2022-5316
bpftool, kernel, kernel-abi-stablelists and 17 more on ol 8

Vendor advisory

https://linux.oracle.com/errata/ELSA-2022-5249.html

For tools and AI agents

This page as data: JSON · Markdown

Which servers are still behind?

Patchblox compares the installed package on every Linux machine against the fixed version for its release, including machines reported through Azure Update Manager.

Get a demo