Linux · Security advisory · January 19, 2022

ELSA-2022-9028: Security update for 9 packages

ELSA-2022-9028, released January 19, 2022, fixes 1 CVE across 9 products. One of them is being exploited (CVE-2022-0185); 1 on CISA KEV. Patch Radar priority: Patch now.

Patch now1 on CISA KEV
CVEs closed
1
None rated Critical
Exploited
1
CVE-2022-0185
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.2515
97th percentile

Fixed package versions

ProductReleaseFixed in
kernel-uekol 80:5.4.17-2136.302.7.2.1.el8uek
kernel-uek-debugol 80:5.4.17-2136.302.7.2.1.el8uek
kernel-uek-debug-develol 80:5.4.17-2136.302.7.2.1.el8uek
kernel-uek-develol 80:5.4.17-2136.302.7.2.1.el8uek
kernel-uek-docol 80:5.4.17-2136.302.7.2.1.el8uek
kernel-uek-toolsol 80:5.4.17-2136.302.7.2.1.el7uek
kernel-uek-tools-libsol 80:5.4.17-2136.302.7.2.1.el7uek
perfol 80:5.4.17-2136.302.7.2.1.el7uek
python-perfol 80:5.4.17-2136.302.7.2.1.el7uek

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
Patch now CVE-2022-0185 bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: x... 8.4 0.2515 KEVExploited
Showing 1 to 1 of 1 1