Linux · Security advisory · April 17, 2023

ELSA-2023-12255: Security update for 9 packages

ELSA-2023-12255, released April 17, 2023, fixes 5 CVEs across 9 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
5
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0035
29th percentile

Priority of the 5 CVEs

Patch now 0 Urgent 0 High 2 Routine 3

Fixed package versions

ProductReleaseFixed in
kernel-uekol 80:5.4.17-2136.318.7.1.el8uek
kernel-uek-debugol 80:5.4.17-2136.318.7.1.el8uek
kernel-uek-debug-develol 80:5.4.17-2136.318.7.1.el8uek
kernel-uek-develol 80:5.4.17-2136.318.7.1.el8uek
kernel-uek-docol 80:5.4.17-2136.318.7.1.el8uek
kernel-uek-toolsol 80:5.4.17-2136.318.7.1.el7uek
kernel-uek-tools-libsol 80:5.4.17-2136.318.7.1.el7uek
perfol 80:5.4.17-2136.318.7.1.el7uek
python-perfol 80:5.4.17-2136.318.7.1.el7uek

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2022-2196 linux: A regression exists in the Linux Kernel within KVM: nVMX that allowed for speculative execution attacks. L2 can carry... 8.8 0.0035 None reported
High CVE-2023-23559 linux: In rndis_query_oid in drivers/net/wireless/rndis_wlan.c in the Linux kernel through 6.1.5, there is an integer overfl... 7.8 0.0031 None reported
Routine CVE-2022-27672 linux: When SMT is enabled, certain AMD processors may speculatively execute instructions using a target from the sibling th... 4.7 0.0028 None reported
Routine CVE-2022-3108 kernel-zfcpdump-core: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: f... 5.5 0.0022 None reported
Routine CVE-2022-4129 kernel-rt-kvm: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high... 5.5 0.0018 None reported
Showing 1 to 5 of 5 1