Linux · Security advisory · December 13, 2023

ELSA-2023-13043: Security update for 14 packages

ELSA-2023-13043, released December 13, 2023, fixes 10 CVEs across 14 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
10
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0962
95th percentile

Priority of the 10 CVEs

Patch now 0 Urgent 0 High 6 Routine 4

Fixed package versions

ProductReleaseFixed in
bpftoolol 80:5.15.0-201.135.6.el8uek
bpftoolol 90:5.15.0-201.135.6.el8uek
kernel-uekol 80:5.15.0-201.135.6.el8uek
kernel-uekol 90:5.15.0-201.135.6.el8uek
kernel-uek-containerol 80:5.15.0-201.135.6.el8uek
kernel-uek-containerol 90:5.15.0-201.135.6.el8uek
kernel-uek-container-debugol 80:5.15.0-201.135.6.el8uek
kernel-uek-container-debugol 90:5.15.0-201.135.6.el8uek
kernel-uek-coreol 80:5.15.0-201.135.6.el8uek
kernel-uek-coreol 90:5.15.0-201.135.6.el8uek
kernel-uek-debugol 80:5.15.0-201.135.6.el8uek
kernel-uek-debugol 90:5.15.0-201.135.6.el8uek
kernel-uek-debug-coreol 80:5.15.0-201.135.6.el8uek
kernel-uek-debug-coreol 90:5.15.0-201.135.6.el8uek
kernel-uek-debug-develol 80:5.15.0-201.135.6.el8uek
kernel-uek-debug-develol 90:5.15.0-201.135.6.el8uek
kernel-uek-debug-modulesol 80:5.15.0-201.135.6.el8uek
kernel-uek-debug-modulesol 90:5.15.0-201.135.6.el8uek
kernel-uek-debug-modules-extraol 80:5.15.0-201.135.6.el8uek
kernel-uek-debug-modules-extraol 90:5.15.0-201.135.6.el8uek
kernel-uek-develol 80:5.15.0-201.135.6.el8uek
kernel-uek-develol 90:5.15.0-201.135.6.el8uek
kernel-uek-docol 80:5.15.0-201.135.6.el8uek
kernel-uek-docol 90:5.15.0-201.135.6.el8uek
kernel-uek-modulesol 80:5.15.0-201.135.6.el8uek
kernel-uek-modulesol 90:5.15.0-201.135.6.el8uek
kernel-uek-modules-extraol 80:5.15.0-201.135.6.el8uek
kernel-uek-modules-extraol 90:5.15.0-201.135.6.el8uek

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2023-5178 bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: b... 9.8 0.0962 None reported
High CVE-2023-45871 kernel-rt: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high... 7.5 0.0064 None reported
High CVE-2023-4921 kernel-rt: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high... 7.8 0.0042 None reported
High CVE-2023-4623 kernel-rt: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high... 7.8 0.0028 None reported
High CVE-2023-5090 linux: A flaw was found in KVM 7.0 0.0025 None reported
High CVE-2023-4244 linux: A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local... 8.0 0.0024 None reported
Routine CVE-2023-5197 linux: A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local... 6.6 0.0037 None reported
Routine CVE-2023-42756 kernel-64k: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: G... 4.7 0.0027 None reported
Routine CVE-2023-42752 kernel-default: The SUSE Linux Enterprise 15 SP6 kernel was updated to fix various security issues The following security issues wer... 5.5 0.0026 None reported
Routine CVE-2023-3159 linux: A use after free issue was discovered in driver/firewire in outbound_phy_packet_callback in the Linux Kernel 6.7 0.0022 None reported
Showing 1 to 10 of 10 1