Linux · Security advisory · May 23, 2023

ELSA-2023-2951: Security update for 20 packages

ELSA-2023-2951, released May 23, 2023, fixes 39 CVEs across 20 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
39
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0414
90th percentile

Priority of the 39 CVEs

Patch now 0 Urgent 0 High 16 Routine 23

Fixed package versions

ProductReleaseFixed in
bpftoolol 80:4.18.0-477.10.1.el8_8
kernelol 80:4.18.0-477.10.1.el8_8
kernel-abi-stablelistsol 80:4.18.0-477.10.1.el8_8
kernel-coreol 80:4.18.0-477.10.1.el8_8
kernel-cross-headersol 80:4.18.0-477.10.1.el8_8
kernel-debugol 80:4.18.0-477.10.1.el8_8
kernel-debug-coreol 80:4.18.0-477.10.1.el8_8
kernel-debug-develol 80:4.18.0-477.10.1.el8_8
kernel-debug-modulesol 80:4.18.0-477.10.1.el8_8
kernel-debug-modules-extraol 80:4.18.0-477.10.1.el8_8
kernel-develol 80:4.18.0-477.10.1.el8_8
kernel-docol 80:4.18.0-477.10.1.el8_8
kernel-headersol 80:4.18.0-477.10.1.el8_8
kernel-modulesol 80:4.18.0-477.10.1.el8_8
kernel-modules-extraol 80:4.18.0-477.10.1.el8_8
kernel-toolsol 80:4.18.0-477.10.1.el8_8
kernel-tools-libsol 80:4.18.0-477.10.1.el8_8
kernel-tools-libs-develol 80:4.18.0-477.10.1.el8_8
perfol 80:4.18.0-477.10.1.el8_8
python3-perfol 80:4.18.0-477.10.1.el8_8

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2022-41674 backport-iwlwifi-dkms: An issue was discovered in the Linux kernel before 5.19.16 8.1 0.0414 None reported
High CVE-2022-3564 kernel-rt: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high... 7.8 0.0146 None reported
High CVE-2022-3623 kernel-debug-modules-core: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * use-after... 7.5 0.0110 None reported
High CVE-2022-25265 kernel-rt: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high... 7.8 0.0105 None reported
High CVE-2022-42720 backport-iwlwifi-dkms: Various refcounting bugs in the multi-BSS handling in the mac80211 stack in the Linux kernel 5.1 through 5.19.x befor... 7.8 0.0090 None reported
High CVE-2022-1679 kernel-tools-libs-devel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * off-path... 7.8 0.0081 None reported
High CVE-2022-30594 kernel-rt: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high... 7.8 0.0080 None reported
High CVE-2022-3566 linux: A vulnerability was identified in Linux Kernel up to 4.19.316/5.4.278/5.10.220/5.15.161 7.1 0.0074 None reported
High CVE-2023-0461 bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * use-after... 7.8 0.0065 None reported
High CVE-2022-2196 linux: A regression exists in the Linux Kernel within KVM: nVMX that allowed for speculative execution attacks. L2 can carry... 8.8 0.0035 None reported
High CVE-2022-3625 kernel-debug-modules-core: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * use-after... 7.8 0.0035 None reported
High CVE-2022-39189 kernel-rt-kvm: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high... 7.8 0.0034 None reported
High CVE-2022-3239 kernel-rt: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high... 7.8 0.0025 None reported
High CVE-2022-3028 kernel-rt-debug-modules-extra: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high... 7.0 0.0023 None reported
High CVE-2022-20141 kernel-tools: The kernel packages contain the Linux kernel, the core of any Linux operating system. The following packages have be... 7.0 0.0015 None reported
High CVE-2022-3522 kernel-debug-modules-core: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * use-after... 7.0 n/a None reported
Routine CVE-2022-2663 kernel-rt: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high... 5.3 0.0407 None reported
Routine CVE-2022-3524 kernel-debug-modules-core: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * use-after... 5.5 0.0109 None reported
Routine CVE-2023-0394 bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * use-after... 6.5 0.0104 None reported
Routine CVE-2022-47929 kernel-rt: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high... 5.5 0.0104 None reported
Routine CVE-2022-42703 kernel-rt: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high... 5.5 0.0092 None reported
Routine CVE-2022-41218 kernel-rt-debug-core: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high... 5.5 0.0083 None reported
Routine CVE-2022-42721 backport-iwlwifi-dkms: A list management bug in BSS handling in the mac80211 stack in the Linux kernel 5.1 through 5.19.x before 5.19.16 cou... 5.5 0.0065 None reported
Routine CVE-2021-33656 kernel-rt: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high... 6.8 0.0061 None reported
Routine CVE-2022-3628 kernel-debug-modules-core: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * use-after... 6.8 0.0060 None reported
Showing 1 to 25 of 39 1Next