Linux · Security advisory · September 21, 2022
ELSA-2022-9830: Security update for 2 packages
ELSA-2022-9830, released September 21, 2022, fixes 3 CVEs across 2 products. One of them is being exploited (CVE-2022-2586); 1 on CISA KEV. Patch Radar priority: Patch now.
Patch now1 on CISA KEV
CVEs closed
3
None rated Critical
Exploited
1
CVE-2022-2586
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.1020
95th percentile
Priority of the 3 CVEs
Patch now 1
Urgent 0
High 2
Routine 0
Fixed package versions
| Product | Release | Fixed in |
|---|---|---|
| kernel-uek-container | ol 8 | 0:5.15.0-2.52.3.el8 |
| kernel-uek-container-debug | ol 8 | 0:5.15.0-2.52.3.el8 |
CVEs this fix closes
| Priority | CVE | Title | Impact | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| Patch now | CVE-2022-2586 | kernel-rt: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high... | 7.8 | 0.1020 | KEVExploited | |
| High | CVE-2022-2585 | kernel-rt-debug-core: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high... | 7.8 | 0.0128 | None reported | |
| High | CVE-2022-21546 | linux: In the Linux kernel, the following vulnerability has been resolved: scsi: target: Fix WRITE_SAME No Data Buffer cras... | 7.8 | 0.0045 | None reported |
Showing 1 to 3 of 3
1