Linux · Security advisory · February 14, 2022

ELSA-2022-9148: Security update for 2 packages

ELSA-2022-9148, released February 14, 2022, fixes 5 CVEs across 2 products. One of them is being exploited (CVE-2022-0185); 1 on CISA KEV. Patch Radar priority: Patch now.

Patch now1 on CISA KEV

CVEs closed

None rated Critical

Exploited

CVE-2022-0185

Exploitation more likely

Vendor assessment

Highest EPSS

0.2515

97th percentile

Priority of the 5 CVEs

Patch now 1
                                Urgent 0
                                High 4
                                Routine 0

Fixed package versions

Product	Release	Fixed in
kernel-uek-container	ol 8	0:5.4.17-2136.304.4.1.el8
kernel-uek-container-debug	ol 8	0:5.4.17-2136.304.4.1.el8

CVEs this fix closes

Priority	CVE	Title	CVSS	EPSS	Exploitation
Patch now	CVE-2022-0185	bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: x...	8.4	0.2515	KEVExploited
High	CVE-2021-3752	bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: f...	8.2	0.0174	None reported
High	CVE-2021-44733	bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: f...	8.2	0.0075	None reported
High	CVE-2021-3640	kernel-debug-devel-matched: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * off-path...	7.8	0.0037	None reported
High	CVE-2021-4155	kernel-tools-libs-devel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: x...	7.8	0.0030	None reported

Also fixes CVE-2022-0185

ALAS2023-2023-070
bpftool, bpftool-debuginfo, kernel and 16 more on amzn 2023
RHSA-2022:0232
kpatch-patch-4_18_0-348, kpatch-patch-4_18_0-348_2_1, kpatch-patch-4_18_0-348_7_1 on RHEL 8
ELSA-2022-0188
bpftool, kernel, kernel-abi-stablelists and 16 more on ol 8
ALSA-2022:0188
kernel-tools-libs-devel on almalinux 8
RLSA-2022:0188
kernel on rocky 8
RLSA-2022:0176
kernel-rt on rocky 8
RHSA-2022:0176
kernel-rt, kernel-rt-core, kernel-rt-debug and 9 more on RHEL 8
RHSA-2022:0188
bpftool, kernel, kernel-abi-stablelists and 19 more on RHEL 8

Vendor advisory

https://linux.oracle.com/errata/ELSA-2022-9148.html

For tools and AI agents

This page as data: JSON · Markdown

Which servers are still behind?

Patchblox compares the installed package on every Linux machine against the fixed version for its release, including machines reported through Azure Update Manager.

Get a demo