Linux · Security advisory · February 14, 2022

ELSA-2022-9147: Security update for 9 packages

ELSA-2022-9147, released February 14, 2022, fixes 3 CVEs across 9 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
3
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0174
77th percentile

Priority of the 3 CVEs

Patch now 0 Urgent 0 High 3 Routine 0

Fixed package versions

ProductReleaseFixed in
kernel-uekol 80:5.4.17-2136.304.4.1.el8uek
kernel-uek-debugol 80:5.4.17-2136.304.4.1.el8uek
kernel-uek-debug-develol 80:5.4.17-2136.304.4.1.el8uek
kernel-uek-develol 80:5.4.17-2136.304.4.1.el8uek
kernel-uek-docol 80:5.4.17-2136.304.4.1.el8uek
kernel-uek-toolsol 80:5.4.17-2136.304.4.1.el7uek
kernel-uek-tools-libsol 80:5.4.17-2136.304.4.1.el7uek
perfol 80:5.4.17-2136.304.4.1.el7uek
python-perfol 80:5.4.17-2136.304.4.1.el7uek

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2021-3752 bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: f... 8.2 0.0174 None reported
High CVE-2021-44733 bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: f... 8.2 0.0075 None reported
High CVE-2021-3640 kernel-debug-devel-matched: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * off-path... 7.8 0.0037 None reported
Showing 1 to 3 of 3 1