Linux · Security advisory · July 19, 2022

ELSA-2022-9602: Security update for 2 packages

ELSA-2022-9602, released July 19, 2022, fixes 1 CVE across 2 products. None of them is reported as exploited. Patch Radar priority: Routine.

Routine

CVEs closed

None rated Critical

Exploited

None reported

Exploitation more likely

Vendor assessment

Highest EPSS

0.0020

9th percentile

Fixed package versions

Product	Release	Fixed in
kernel-uek-container	ol 8	0:5.15.0-0.30.20.1.el8
kernel-uek-container-debug	ol 8	0:5.15.0-0.30.20.1.el8

CVEs this fix closes

Priority	CVE	Title	Impact	CVSS	EPSS	Exploitation
Routine	CVE-2022-21505	kernel-rt: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high...		6.7	0.0020	None reported

Also fixes CVE-2022-21505

ALAS2023-2023-070
bpftool, bpftool-debuginfo, kernel and 16 more on amzn 2023
RHSA-2023:2458
bpftool, kernel, kernel-64k and 43 more on RHEL 9
RHSA-2023:2148
kernel-rt, kernel-rt-core, kernel-rt-debug and 11 more on RHEL 9
ELSA-2023-2458
bpftool, kernel, kernel-abi-stablelists and 24 more on ol 9
ALSA-2023:2148
kernel-rt, kernel-rt-core, kernel-rt-debug and 11 more on almalinux 9
ALSA-2023:2458
bpftool, kernel, kernel-64k and 44 more on almalinux 9
DEBIAN-CVE-2022-21505
linux on Debian 12.15 (bookworm), Debian 13.5 (trixie), Debian 14
ELSA-2022-9601
bpftool, kernel-uek, kernel-uek-core and 9 more on ol 8, ol 9

Vendor advisory

https://linux.oracle.com/errata/ELSA-2022-9602.html

For tools and AI agents

This page as data: JSON · Markdown

Which servers are still behind?

Patchblox compares the installed package on every Linux machine against the fixed version for its release, including machines reported through Azure Update Manager.

Get a demo