Linux · Security advisory · November 12, 2023

ELSA-2023-6583: Security update for 27 packages

ELSA-2023-6583, released November 12, 2023, fixes 41 CVEs across 27 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
41
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0315
87th percentile

Priority of the 41 CVEs

Patch now 0 Urgent 0 High 13 Routine 28

Fixed package versions

ProductReleaseFixed in
bpftoolol 90:7.2.0-362.8.1.el9_3
kernelol 90:5.14.0-362.8.1.el9_3
kernel-abi-stablelistsol 90:5.14.0-362.8.1.el9_3
kernel-coreol 90:5.14.0-362.8.1.el9_3
kernel-cross-headersol 90:5.14.0-362.8.1.el9_3
kernel-debugol 90:5.14.0-362.8.1.el9_3
kernel-debug-coreol 90:5.14.0-362.8.1.el9_3
kernel-debug-develol 90:5.14.0-362.8.1.el9_3
kernel-debug-devel-matchedol 90:5.14.0-362.8.1.el9_3
kernel-debug-modulesol 90:5.14.0-362.8.1.el9_3
kernel-debug-modules-coreol 90:5.14.0-362.8.1.el9_3
kernel-debug-modules-extraol 90:5.14.0-362.8.1.el9_3
kernel-develol 90:5.14.0-362.8.1.el9_3
kernel-devel-matchedol 90:5.14.0-362.8.1.el9_3
kernel-docol 90:5.14.0-362.8.1.el9_3
kernel-headersol 90:5.14.0-362.8.1.el9_3
kernel-modulesol 90:5.14.0-362.8.1.el9_3
kernel-modules-coreol 90:5.14.0-362.8.1.el9_3
kernel-modules-extraol 90:5.14.0-362.8.1.el9_3
kernel-toolsol 90:5.14.0-362.8.1.el9_3
kernel-tools-libsol 90:5.14.0-362.8.1.el9_3
kernel-tools-libs-develol 90:5.14.0-362.8.1.el9_3
libperfol 90:5.14.0-362.8.1.el9_3
perfol 90:5.14.0-362.8.1.el9_3
python3-perfol 90:5.14.0-362.8.1.el9_3
rtlaol 90:5.14.0-362.8.1.el9_3
rvol 90:5.14.0-362.8.1.el9_3

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2023-4206 linux: A use-after-free vulnerability in the Linux kernel's net/sched: cls_route component can be exploited to achieve local... 7.8 0.0059 None reported
High CVE-2023-39191 bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: n... 8.2 0.0053 None reported
High CVE-2023-3268 kernel-abi-stablelists: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: t... 7.1 0.0052 None reported
High CVE-2023-3609 linux: A use-after-free vulnerability in the Linux kernel's net/sched: cls_u32 component can be exploited to achieve local p... 7.8 0.0049 None reported
High CVE-2023-1989 python3-perf: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: t... 7.0 0.0044 None reported
High CVE-2023-3141 kernel-abi-stablelists: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: t... 7.1 0.0043 None reported
High CVE-2022-3565 kernel-devel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): For more de... 8.0 0.0035 None reported
High CVE-2023-4207 linux: A use-after-free vulnerability in the Linux kernel's net/sched: cls_fw component can be exploited to achieve local pr... 7.8 0.0031 None reported
High CVE-2023-4208 kernel-rt: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high... 7.8 0.0031 None reported
High CVE-2023-0597 kernel-abi-stablelists: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: t... 7.0 0.0030 None reported
High CVE-2023-1652 bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: n... 7.8 0.0025 None reported
High CVE-2023-1252 kernel-devel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: t... 7.8 0.0022 None reported
High CVE-2023-4128 kernel-abi-stablelists: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: t... 7.8 n/a None reported
Routine CVE-2022-3594 kernel-devel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: t... 5.3 0.0315 None reported
Routine CVE-2022-40982 intel-microcode: Information exposure through microarchitectural state after transient execution in certain vector execution units for... 6.5 0.0305 None reported
Routine CVE-2022-3523 kernel-64k-debug-core: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: n... 5.3 0.0114 None reported
Routine CVE-2023-4273 bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: n... 6.7 0.0065 None reported
Routine CVE-2022-40133 kernel-devel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: t... 5.5 0.0063 None reported
Routine CVE-2023-1206 kernel-rt: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high... 5.7 0.0063 None reported
Routine CVE-2022-38457 kernel-devel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: t... 5.5 0.0058 None reported
Routine CVE-2022-42895 kernel-devel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: t... 6.5 0.0048 None reported
Routine CVE-2023-3772 kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu... 5.5 0.0048 None reported
Routine CVE-2023-30456 linux: An issue was discovered in arch/x86/kvm/vmx/nested.c in the Linux kernel before 6.2.8 6.5 0.0047 None reported
Routine CVE-2023-33952 linux: A double-free vulnerability was found in handling vmw_buffer_object objects in the vmwgfx driver in the Linux kernel 6.7 0.0047 None reported
Routine CVE-2023-1079 bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: t... 6.8 0.0045 None reported
Showing 1 to 25 of 41 1Next