Linux · Security advisory · May 10, 2022

RHSA-2022:1975: Security update for 12 packages

RHSA-2022:1975, released May 10, 2022, fixes 48 CVEs across 12 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
48
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0690
94th percentile

Priority of the 48 CVEs

Patch now 0 Urgent 0 High 38 Routine 10

Fixed package versions

ProductReleaseFixed in
kernel-rtRHEL 80:4.18.0-372.9.1.rt7.166.el8
kernel-rt-coreRHEL 80:4.18.0-372.9.1.rt7.166.el8
kernel-rt-debugRHEL 80:4.18.0-372.9.1.rt7.166.el8
kernel-rt-debug-coreRHEL 80:4.18.0-372.9.1.rt7.166.el8
kernel-rt-debug-develRHEL 80:4.18.0-372.9.1.rt7.166.el8
kernel-rt-debug-kvmRHEL 80:4.18.0-372.9.1.rt7.166.el8
kernel-rt-debug-modulesRHEL 80:4.18.0-372.9.1.rt7.166.el8
kernel-rt-debug-modules-extraRHEL 80:4.18.0-372.9.1.rt7.166.el8
kernel-rt-develRHEL 80:4.18.0-372.9.1.rt7.166.el8
kernel-rt-kvmRHEL 80:4.18.0-372.9.1.rt7.166.el8
kernel-rt-modulesRHEL 80:4.18.0-372.9.1.rt7.166.el8
kernel-rt-modules-extraRHEL 80:4.18.0-372.9.1.rt7.166.el8

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2021-20322 kernel-debug-core: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: f... 8.2 0.0690 None reported
High CVE-2021-3773 perf: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: f... 9.8 0.0528 None reported
High CVE-2021-45485 bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: f... 8.2 0.0382 None reported
High CVE-2021-4203 bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: f... 8.2 0.0175 None reported
High CVE-2021-3752 bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: f... 8.2 0.0174 None reported
High CVE-2021-4157 bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: f... 8.2 0.0158 None reported
High CVE-2021-3772 bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: f... 8.2 0.0124 None reported
High CVE-2022-1011 kernel-abi-stablelists: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: f... 8.2 0.0117 None reported
High CVE-2021-29154 bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: f... 8.2 0.0093 None reported
High CVE-2021-44733 bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: f... 8.2 0.0075 None reported
High CVE-2021-3743 kernel-rt-core: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high... 8.2 0.0072 None reported
High CVE-2021-43389 bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: f... 8.2 0.0072 None reported
High CVE-2021-43976 kernel-debug: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: f... 8.2 0.0069 None reported
High CVE-2021-3612 kernel-rt-debug-devel: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high... 8.2 0.0069 None reported
High CVE-2020-13974 bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: f... 8.2 0.0057 None reported
High CVE-2021-4197 kernel-rt-devel: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high... 8.2 0.0054 None reported
High CVE-2021-3744 bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: f... 8.2 0.0053 None reported
High CVE-2022-0286 bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: f... 8.2 0.0053 None reported
High CVE-2021-4002 bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: f... 8.2 0.0052 None reported
High CVE-2022-0001 Intel: CVE-2022-0001 Branch History Injection 8.2 0.0051 Exploitation Less Likely
High CVE-2020-27820 bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: f... 8.2 0.0050 None reported
High CVE-2021-42739 bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: f... 8.2 0.0047 None reported
High CVE-2022-0002 bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: f... 8.2 0.0045 None reported
High CVE-2022-0850 kernel-rt-core: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high... 7.1 0.0043 None reported
High CVE-2021-4093 bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: f... 8.8 0.0042 None reported
Showing 1 to 25 of 48 1Next