Linux · Security advisory · September 21, 2022

ELSA-2022-9827: Security update for 12 packages

ELSA-2022-9827, released September 21, 2022, fixes 4 CVEs across 12 products. One of them is being exploited (CVE-2022-2586); 1 on CISA KEV. Patch Radar priority: Patch now.

Patch now1 on CISA KEV
CVEs closed
4
None rated Critical
Exploited
1
CVE-2022-2586
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.1020
95th percentile

Priority of the 4 CVEs

Patch now 1 Urgent 0 High 3 Routine 0

Fixed package versions

ProductReleaseFixed in
bpftoolol 80:5.15.0-2.52.3.el9uek
bpftoolol 90:5.15.0-2.52.3.el9uek
kernel-uekol 80:5.15.0-2.52.3.el9uek
kernel-uekol 90:5.15.0-2.52.3.el9uek
kernel-uek-coreol 80:5.15.0-2.52.3.el9uek
kernel-uek-coreol 90:5.15.0-2.52.3.el9uek
kernel-uek-debugol 80:5.15.0-2.52.3.el9uek
kernel-uek-debugol 90:5.15.0-2.52.3.el9uek
kernel-uek-debug-coreol 80:5.15.0-2.52.3.el9uek
kernel-uek-debug-coreol 90:5.15.0-2.52.3.el9uek
kernel-uek-debug-develol 80:5.15.0-2.52.3.el9uek
kernel-uek-debug-develol 90:5.15.0-2.52.3.el9uek
kernel-uek-debug-modulesol 80:5.15.0-2.52.3.el9uek
kernel-uek-debug-modulesol 90:5.15.0-2.52.3.el9uek
kernel-uek-debug-modules-extraol 80:5.15.0-2.52.3.el9uek
kernel-uek-debug-modules-extraol 90:5.15.0-2.52.3.el9uek
kernel-uek-develol 80:5.15.0-2.52.3.el9uek
kernel-uek-develol 90:5.15.0-2.52.3.el9uek
kernel-uek-docol 80:5.15.0-2.52.3.el9uek
kernel-uek-docol 90:5.15.0-2.52.3.el9uek
kernel-uek-modulesol 80:5.15.0-2.52.3.el9uek
kernel-uek-modulesol 90:5.15.0-2.52.3.el9uek
kernel-uek-modules-extraol 80:5.15.0-2.52.3.el9uek
kernel-uek-modules-extraol 90:5.15.0-2.52.3.el9uek

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
Patch now CVE-2022-2586 kernel-rt: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high... 7.8 0.1020 KEVExploited
High CVE-2022-34918 bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: h... 7.8 0.0545 None reported
High CVE-2022-2585 kernel-rt-debug-core: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high... 7.8 0.0128 None reported
High CVE-2022-21546 linux: In the Linux kernel, the following vulnerability has been resolved: scsi: target: Fix WRITE_SAME No Data Buffer cras... 7.8 0.0045 None reported
Showing 1 to 4 of 4 1