Linux · Security advisory · January 9, 2023

ELSA-2023-12008: Security update for 4 packages

ELSA-2023-12008, released January 9, 2023, fixes 1 CVE across 4 products. None of them is reported as exploited. Patch Radar priority: Routine.

Routine

CVEs closed

None rated Critical

Exploited

None reported

Exploitation more likely

Vendor assessment

Highest EPSS

0.0048

41st percentile

Fixed package versions

Product	Release	Fixed in
kernel-uek-tools	ol 8	0:5.4.17-2136.315.5.el7uek
kernel-uek-tools-libs	ol 8	0:5.4.17-2136.315.5.el7uek
perf	ol 8	0:5.4.17-2136.315.5.el7uek
python-perf	ol 8	0:5.4.17-2136.315.5.el7uek

CVEs this fix closes

Priority	CVE	Title	Impact	CVSS	EPSS	Exploitation
Routine	CVE-2022-42895	kernel-devel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: t...		6.5	0.0048	None reported

Also fixes CVE-2022-42895

RHSA-2023:6583
bpftool, kernel, kernel-64k and 59 more on RHEL 9
RHSA-2023:7077
bpftool, kernel, kernel-abi-stablelists and 20 more on RHEL 8
ALSA-2023:7077
bpftool, kernel, kernel-abi-stablelists and 22 more on almalinux 8
RHSA-2023:6901
kernel-rt, kernel-rt-core, kernel-rt-debug and 9 more on RHEL 8
ELSA-2023-7077
bpftool, kernel, kernel-abi-stablelists and 17 more on ol 8
ELSA-2023-6583
bpftool, kernel, kernel-abi-stablelists and 24 more on ol 9
ELSA-2023-12017
bpftool, kernel-uek, kernel-uek-core and 9 more on ol 8, ol 9
ELSA-2023-12009
kernel-uek-container, kernel-uek-container-debug on ol 8

Vendor advisory

https://linux.oracle.com/errata/ELSA-2023-12008.html

For tools and AI agents

This page as data: JSON · Markdown

Which servers are still behind?

Patchblox compares the installed package on every Linux machine against the fixed version for its release, including machines reported through Azure Update Manager.

Get a demo