Linux · Security advisory · June 14, 2022

ELSA-2022-9481: Security update for 9 packages

ELSA-2022-9481, released June 14, 2022, fixes 4 CVEs across 9 products. None of them is reported as exploited. Patch Radar priority: Routine.

Routine
CVEs closed
4
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0687
94th percentile

Priority of the 4 CVEs

Patch now 0 Urgent 0 High 0 Routine 4

Fixed package versions

ProductReleaseFixed in
kernel-uekol 80:5.4.17-2136.308.9.el8uek
kernel-uek-debugol 80:5.4.17-2136.308.9.el8uek
kernel-uek-debug-develol 80:5.4.17-2136.308.9.el8uek
kernel-uek-develol 80:5.4.17-2136.308.9.el8uek
kernel-uek-docol 80:5.4.17-2136.308.9.el8uek
kernel-uek-toolsol 80:5.4.17-2136.308.9.el7uek
kernel-uek-tools-libsol 80:5.4.17-2136.308.9.el7uek
perfol 80:5.4.17-2136.308.9.el7uek
python-perfol 80:5.4.17-2136.308.9.el7uek

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
Routine CVE-2022-21123 Intel: CVE-2022-21123 Shared Buffers Data Read (SBDR) 6.1 0.0687 Exploitation Less Likely
Routine CVE-2022-21125 Intel: CVE-2022-21125 Shared Buffers Data Sampling (SBDS) 6.1 0.0645 Exploitation Less Likely
Routine CVE-2022-21166 Intel: CVE-2022-21166 Device Register Partial Write (DRPW) 6.1 0.0645 Exploitation Less Likely
Routine CVE-2022-21127 Intel: CVE-2022-21127 Special Register Buffer Data Sampling Update (SRBDS Update) 5.5 0.0551 Exploitation Less Likely
Showing 1 to 4 of 4 1