Linux · Security advisory · March 10, 2022
RHSA-2022:0825: Security update for 23 packages
RHSA-2022:0825, released March 10, 2022, fixes 8 CVEs across 23 products. 3 of them are being exploited (CVE-2022-0847); 3 on CISA KEV. Patch Radar priority: Patch now.
Patch now3 on CISA KEV
CVEs closed
8
None rated Critical
Exploited
3
CVE-2022-0847
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.9280
99th percentile
Priority of the 8 CVEs
Patch now 3
Urgent 0
High 5
Routine 0
Fixed package versions
| Product | Release | Fixed in |
|---|---|---|
| bpftool | RHEL 8 | 0:4.18.0-348.20.1.el8_5 |
| kernel | RHEL 8 | 0:4.18.0-348.20.1.el8_5 |
| kernel-abi-stablelists | RHEL 8 | 0:4.18.0-348.20.1.el8_5 |
| kernel-core | RHEL 8 | 0:4.18.0-348.20.1.el8_5 |
| kernel-debug | RHEL 8 | 0:4.18.0-348.20.1.el8_5 |
| kernel-debug-core | RHEL 8 | 0:4.18.0-348.20.1.el8_5 |
| kernel-debug-devel | RHEL 8 | 0:4.18.0-348.20.1.el8_5 |
| kernel-debug-modules | RHEL 8 | 0:4.18.0-348.20.1.el8_5 |
| kernel-debug-modules-extra | RHEL 8 | 0:4.18.0-348.20.1.el8_5 |
| kernel-devel | RHEL 8 | 0:4.18.0-348.20.1.el8_5 |
| kernel-doc | RHEL 8 | 0:4.18.0-348.20.1.el8_5 |
| kernel-modules | RHEL 8 | 0:4.18.0-348.20.1.el8_5 |
| kernel-modules-extra | RHEL 8 | 0:4.18.0-348.20.1.el8_5 |
| kernel-tools | RHEL 8 | 0:4.18.0-348.20.1.el8_5 |
| kernel-tools-libs | RHEL 8 | 0:4.18.0-348.20.1.el8_5 |
| kernel-tools-libs-devel | RHEL 8 | 0:4.18.0-348.20.1.el8_5 |
| kernel-zfcpdump | RHEL 8 | 0:4.18.0-348.20.1.el8_5 |
| kernel-zfcpdump-core | RHEL 8 | 0:4.18.0-348.20.1.el8_5 |
| kernel-zfcpdump-devel | RHEL 8 | 0:4.18.0-348.20.1.el8_5 |
| kernel-zfcpdump-modules | RHEL 8 | 0:4.18.0-348.20.1.el8_5 |
| kernel-zfcpdump-modules-extra | RHEL 8 | 0:4.18.0-348.20.1.el8_5 |
| perf | RHEL 8 | 0:4.18.0-348.20.1.el8_5 |
| python3-perf | RHEL 8 | 0:4.18.0-348.20.1.el8_5 |
CVEs this fix closes
| Priority | CVE | Title | Impact | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| Patch now | CVE-2022-0847 | kernel-doc: The kernel packages contain the Linux kernel, the core of any Linux operating system. The following packages have be... | 8.8 | 0.9280 | KEVExploited | |
| Patch now | CVE-2022-0492 | kernel-tools-libs-devel: The kernel packages contain the Linux kernel, the core of any Linux operating system. The following packages have be... | 8.8 | 0.0553 | KEVExploited | |
| Patch now | CVE-2021-0920 | bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. The following packages have be... | 8.8 | 0.0087 | KEVExploited | |
| High | CVE-2022-0435 | bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. The following packages have be... | 8.8 | 0.6777 | None reported | |
| High | CVE-2022-22942 | kernel-doc: The kernel packages contain the Linux kernel, the core of any Linux operating system. The following packages have be... | 8.8 | 0.0256 | None reported | |
| High | CVE-2021-4154 | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. The following packages have be... | 8.8 | 0.0122 | None reported | |
| High | CVE-2022-0330 | kernel-tools-libs-devel: The kernel packages contain the Linux kernel, the core of any Linux operating system. The following packages have be... | 8.8 | 0.0038 | None reported | |
| High | CVE-2022-0516 | kernel-tools-libs-devel: The kernel packages contain the Linux kernel, the core of any Linux operating system. The following packages have be... | 8.8 | 0.0034 | None reported |
Showing 1 to 8 of 8
1