Linux · Security advisory · January 10, 2022

ELSA-2022-9013: Security update for 2 packages

ELSA-2022-9013, released January 10, 2022, fixes 1 CVE across 2 products. One of them is being exploited (CVE-2021-0920); 1 on CISA KEV. Patch Radar priority: Patch now.

Patch now1 on CISA KEV

CVEs closed

None rated Critical

Exploited

CVE-2021-0920

Exploitation more likely

Vendor assessment

Highest EPSS

0.0087

58th percentile

Fixed package versions

Product	Release	Fixed in
kernel-uek-container	ol 8	0:5.4.17-2136.302.7.2.el8
kernel-uek-container-debug	ol 8	0:5.4.17-2136.302.7.2.el8

CVEs this fix closes

Priority	CVE	Title	Impact	CVSS	EPSS	Exploitation
Patch now	CVE-2021-0920	bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. The following packages have be...		8.8	0.0087	KEVExploited

Also fixes CVE-2021-0920

ELSA-2022-0825
bpftool, kernel, kernel-abi-stablelists and 17 more on ol 8
ALSA-2022:0825
kernel-tools-libs-devel on almalinux 8
RLSA-2022:0825
kernel on rocky 8
RHSA-2022:0825
bpftool, kernel, kernel-abi-stablelists and 20 more on RHEL 8
RLSA-2022:0819
kernel-rt on rocky 8
RHSA-2022:0819
kernel-rt, kernel-rt-core, kernel-rt-debug and 9 more on RHEL 8
RHSA-2022:0849
kpatch-patch-4_18_0-348, kpatch-patch-4_18_0-348_12_2, kpatch-patch-4_18_0-348_2_1 and 1 more on RHEL 8
ELSA-2022-9012
kernel-uek, kernel-uek-debug, kernel-uek-debug-devel and 6 more on ol 8

Vendor advisory

https://linux.oracle.com/errata/ELSA-2022-9013.html

For tools and AI agents

This page as data: JSON · Markdown

Which servers are still behind?

Patchblox compares the installed package on every Linux machine against the fixed version for its release, including machines reported through Azure Update Manager.

Get a demo