Linux · Security advisory · January 11, 2024

ELSA-2024-12069: Security update for 20 packages

ELSA-2024-12069, released January 11, 2024, fixes 3 CVEs across 20 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
3
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0062
49th percentile

Priority of the 3 CVEs

Patch now 0 Urgent 0 High 2 Routine 1

Fixed package versions

ProductReleaseFixed in
bpftoolol 80:4.18.0-513.11.0.1.el8_9
kernelol 80:4.18.0-513.11.0.1.el8_9
kernel-abi-stablelistsol 80:4.18.0-513.11.0.1.el8_9
kernel-coreol 80:4.18.0-513.11.0.1.el8_9
kernel-cross-headersol 80:4.18.0-513.11.0.1.el8_9
kernel-debugol 80:4.18.0-513.11.0.1.el8_9
kernel-debug-coreol 80:4.18.0-513.11.0.1.el8_9
kernel-debug-develol 80:4.18.0-513.11.0.1.el8_9
kernel-debug-modulesol 80:4.18.0-513.11.0.1.el8_9
kernel-debug-modules-extraol 80:4.18.0-513.11.0.1.el8_9
kernel-develol 80:4.18.0-513.11.0.1.el8_9
kernel-docol 80:4.18.0-513.11.0.1.el8_9
kernel-headersol 80:4.18.0-513.11.0.1.el8_9
kernel-modulesol 80:4.18.0-513.11.0.1.el8_9
kernel-modules-extraol 80:4.18.0-513.11.0.1.el8_9
kernel-toolsol 80:4.18.0-513.11.0.1.el8_9
kernel-tools-libsol 80:4.18.0-513.11.0.1.el8_9
kernel-tools-libs-develol 80:4.18.0-513.11.0.1.el8_9
perfol 80:4.18.0-513.11.0.1.el8_9
python3-perfol 80:4.18.0-513.11.0.1.el8_9

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2023-4622 kpatch-patch-4_18_0-513_5_1: This is a kernel live patch module which is automatically loaded by the RPM post-install script to modify the code of... 7.0 0.0062 None reported
High CVE-2023-42753 kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu... 7.8 0.0051 None reported
Routine CVE-2023-2162 bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: u... 6.6 0.0025 None reported
Showing 1 to 3 of 3 1