Linux · Security advisory · January 12, 2023

ELSA-2023-12017: Security update for 12 packages

ELSA-2023-12017, released January 12, 2023, fixes 3 CVEs across 12 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
3
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0246
84th percentile

Priority of the 3 CVEs

Patch now 0 Urgent 0 High 2 Routine 1

Fixed package versions

ProductReleaseFixed in
bpftoolol 80:5.15.0-6.80.3.1.el9uek
bpftoolol 90:5.15.0-6.80.3.1.el9uek
kernel-uekol 80:5.15.0-6.80.3.1.el9uek
kernel-uekol 90:5.15.0-6.80.3.1.el9uek
kernel-uek-coreol 80:5.15.0-6.80.3.1.el9uek
kernel-uek-coreol 90:5.15.0-6.80.3.1.el9uek
kernel-uek-debugol 80:5.15.0-6.80.3.1.el9uek
kernel-uek-debugol 90:5.15.0-6.80.3.1.el9uek
kernel-uek-debug-coreol 80:5.15.0-6.80.3.1.el9uek
kernel-uek-debug-coreol 90:5.15.0-6.80.3.1.el9uek
kernel-uek-debug-develol 80:5.15.0-6.80.3.1.el9uek
kernel-uek-debug-develol 90:5.15.0-6.80.3.1.el9uek
kernel-uek-debug-modulesol 80:5.15.0-6.80.3.1.el9uek
kernel-uek-debug-modulesol 90:5.15.0-6.80.3.1.el9uek
kernel-uek-debug-modules-extraol 80:5.15.0-6.80.3.1.el9uek
kernel-uek-debug-modules-extraol 90:5.15.0-6.80.3.1.el9uek
kernel-uek-develol 80:5.15.0-6.80.3.1.el9uek
kernel-uek-develol 90:5.15.0-6.80.3.1.el9uek
kernel-uek-docol 80:5.15.0-6.80.3.1.el9uek
kernel-uek-docol 90:5.15.0-6.80.3.1.el9uek
kernel-uek-modulesol 80:5.15.0-6.80.3.1.el9uek
kernel-uek-modulesol 90:5.15.0-6.80.3.1.el9uek
kernel-uek-modules-extraol 80:5.15.0-6.80.3.1.el9uek
kernel-uek-modules-extraol 90:5.15.0-6.80.3.1.el9uek

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2022-42896 bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: u... 8.8 0.0246 None reported
High CVE-2022-4378 kernel-abi-stablelists: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: s... 7.8 0.0044 None reported
Routine CVE-2022-42895 kernel-devel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: t... 6.5 0.0048 None reported
Showing 1 to 3 of 3 1