Linux · Security advisory · March 7, 2024

ELSA-2024-0461: Security update for 27 packages

ELSA-2024-0461, released March 7, 2024, fixes 15 CVEs across 27 products. None of them is reported as exploited. Patch Radar priority: High.

High

CVEs closed

None rated Critical

Exploited

None reported

Exploitation more likely

Vendor assessment

Highest EPSS

0.0962

95th percentile

Priority of the 15 CVEs

Patch now 0
                                Urgent 0
                                High 13
                                Routine 2

Fixed package versions

Product	Release	Fixed in
bpftool	ol 9	0:7.2.0-362.18.1.el9_3
kernel	ol 9	0:5.14.0-362.18.1.el9_3
kernel-abi-stablelists	ol 9	0:5.14.0-362.18.1.el9_3
kernel-core	ol 9	0:5.14.0-362.18.1.el9_3
kernel-cross-headers	ol 9	0:5.14.0-362.18.1.el9_3
kernel-debug	ol 9	0:5.14.0-362.18.1.el9_3
kernel-debug-core	ol 9	0:5.14.0-362.18.1.el9_3
kernel-debug-devel	ol 9	0:5.14.0-362.18.1.el9_3
kernel-debug-devel-matched	ol 9	0:5.14.0-362.18.1.el9_3
kernel-debug-modules	ol 9	0:5.14.0-362.18.1.el9_3
kernel-debug-modules-core	ol 9	0:5.14.0-362.18.1.el9_3
kernel-debug-modules-extra	ol 9	0:5.14.0-362.18.1.el9_3
kernel-devel	ol 9	0:5.14.0-362.18.1.el9_3
kernel-devel-matched	ol 9	0:5.14.0-362.18.1.el9_3
kernel-doc	ol 9	0:5.14.0-362.18.1.el9_3
kernel-headers	ol 9	0:5.14.0-362.18.1.el9_3
kernel-modules	ol 9	0:5.14.0-362.18.1.el9_3
kernel-modules-core	ol 9	0:5.14.0-362.18.1.el9_3
kernel-modules-extra	ol 9	0:5.14.0-362.18.1.el9_3
kernel-tools	ol 9	0:5.14.0-362.18.1.el9_3
kernel-tools-libs	ol 9	0:5.14.0-362.18.1.el9_3
kernel-tools-libs-devel	ol 9	0:5.14.0-362.18.1.el9_3
libperf	ol 9	0:5.14.0-362.18.1.el9_3
perf	ol 9	0:5.14.0-362.18.1.el9_3
python3-perf	ol 9	0:5.14.0-362.18.1.el9_3
rtla	ol 9	0:5.14.0-362.18.1.el9_3
rv	ol 9	0:5.14.0-362.18.1.el9_3

CVEs this fix closes

Priority	CVE	Title	CVSS	EPSS	Exploitation
High	CVE-2023-5178	bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: b...	9.8	0.0962	None reported
High	CVE-2023-46813	kernel-rt: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high...	7.0	0.0073	None reported
High	CVE-2023-4622	kpatch-patch-4_18_0-513_5_1: This is a kernel live patch module which is automatically loaded by the RPM post-install script to modify the code of...	7.0	0.0062	None reported
High	CVE-2023-40283	kernel-rt-core: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high...	7.8	0.0055	None reported
High	CVE-2023-42753	kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu...	7.8	0.0051	None reported
High	CVE-2022-3545	kernel-rt: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high...	7.8	0.0044	None reported
High	CVE-2023-3777	bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: t...	7.8	0.0041	None reported
High	CVE-2023-3812	bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: b...	7.8	0.0034	None reported
High	CVE-2023-4015	bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: t...	7.8	0.0029	None reported
High	CVE-2022-41858	kernel-rt: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high...	7.1	0.0029	None reported
High	CVE-2023-5633	kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes. The following security bu...	7.8	0.0028	None reported
High	CVE-2023-2176	kernel-rt: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high...	7.8	0.0024	None reported
High	CVE-2023-38409	kernel-devel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): For more de...	8.0	0.0019	None reported
Routine	CVE-2022-36402	bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: u...	5.5	0.0060	None reported
Routine	CVE-2023-2166	kernel-rt: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high...	5.5	0.0020	None reported

Also fixes CVE-2023-5178

RHSA-2024:0461
bpftool, kernel, kernel-64k and 59 more on RHEL 9
ELSA-2023-13043
bpftool, kernel-uek, kernel-uek-container and 11 more on ol 8, ol 9
RHSA-2023:7549
bpftool, kernel, kernel-abi-stablelists and 20 more on RHEL 8
RXSA-2023:7549
kernel on rocky 8
RLSA-2023:7548
kernel-rt on rocky 8
ELSA-2023-7549
bpftool, kernel, kernel-abi-stablelists and 17 more on ol 8
ALSA-2023:7549
bpftool, kernel, kernel-abi-stablelists and 21 more on almalinux 8
RHSA-2023:7548
kernel-rt, kernel-rt-core, kernel-rt-debug and 9 more on RHEL 8

Vendor advisory

https://linux.oracle.com/errata/ELSA-2024-0461.html

For tools and AI agents

This page as data: JSON · Markdown

Which servers are still behind?

Patchblox compares the installed package on every Linux machine against the fixed version for its release, including machines reported through Azure Update Manager.

Get a demo