Linux · Security advisory · August 9, 2022

RHSA-2022:6003: Security update for 26 packages

RHSA-2022:6003, released August 9, 2022, fixes 2 CVEs across 26 products. None of them is reported as exploited. Patch Radar priority: High.

High

CVEs closed

None rated Critical

Exploited

None reported

Exploitation more likely

Vendor assessment

Highest EPSS

0.0050

43rd percentile

Priority of the 2 CVEs

Patch now 0
                                Urgent 0
                                High 2
                                Routine 0

Fixed package versions

Product	Release	Fixed in
bpftool	RHEL 9	0:5.14.0-70.22.1.el9_0
kernel	RHEL 9	0:5.14.0-70.22.1.el9_0
kernel-abi-stablelists	RHEL 9	0:5.14.0-70.22.1.el9_0
kernel-core	RHEL 9	0:5.14.0-70.22.1.el9_0
kernel-debug	RHEL 9	0:5.14.0-70.22.1.el9_0
kernel-debug-core	RHEL 9	0:5.14.0-70.22.1.el9_0
kernel-debug-devel	RHEL 9	0:5.14.0-70.22.1.el9_0
kernel-debug-devel-matched	RHEL 9	0:5.14.0-70.22.1.el9_0
kernel-debug-modules	RHEL 9	0:5.14.0-70.22.1.el9_0
kernel-debug-modules-extra	RHEL 9	0:5.14.0-70.22.1.el9_0
kernel-devel	RHEL 9	0:5.14.0-70.22.1.el9_0
kernel-devel-matched	RHEL 9	0:5.14.0-70.22.1.el9_0
kernel-doc	RHEL 9	0:5.14.0-70.22.1.el9_0
kernel-modules	RHEL 9	0:5.14.0-70.22.1.el9_0
kernel-modules-extra	RHEL 9	0:5.14.0-70.22.1.el9_0
kernel-tools	RHEL 9	0:5.14.0-70.22.1.el9_0
kernel-tools-libs	RHEL 9	0:5.14.0-70.22.1.el9_0
kernel-tools-libs-devel	RHEL 9	0:5.14.0-70.22.1.el9_0
kernel-zfcpdump	RHEL 9	0:5.14.0-70.22.1.el9_0
kernel-zfcpdump-core	RHEL 9	0:5.14.0-70.22.1.el9_0
kernel-zfcpdump-devel	RHEL 9	0:5.14.0-70.22.1.el9_0
kernel-zfcpdump-devel-matched	RHEL 9	0:5.14.0-70.22.1.el9_0
kernel-zfcpdump-modules	RHEL 9	0:5.14.0-70.22.1.el9_0
kernel-zfcpdump-modules-extra	RHEL 9	0:5.14.0-70.22.1.el9_0
perf	RHEL 9	0:5.14.0-70.22.1.el9_0
python3-perf	RHEL 9	0:5.14.0-70.22.1.el9_0

CVEs this fix closes

Priority	CVE	Title	Impact	CVSS	EPSS	Exploitation
High	CVE-2022-1055	kernel-rt: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high...		7.8	0.0050	None reported
High	CVE-2022-0494	bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * A use-aft...		7.8	0.0042	None reported

Also fixes CVE-2022-1055

ALAS2023-2023-070
bpftool, bpftool-debuginfo, kernel and 16 more on amzn 2023
RHSA-2022:7683
bpftool, kernel, kernel-abi-stablelists and 20 more on RHEL 8
RHSA-2022:7444
kernel-rt, kernel-rt-core, kernel-rt-debug and 9 more on RHEL 8
RLSA-2022:7683
kernel on rocky 8
ALSA-2022:7683
bpftool, kernel, kernel-abi-stablelists and 22 more on almalinux 8
ELSA-2022-7683
bpftool, kernel, kernel-abi-stablelists and 17 more on ol 8
RLSA-2022:7444
kernel-rt on rocky 8
ALSA-2022:7444
kernel-rt, kernel-rt-core, kernel-rt-debug and 9 more on almalinux 8

Vendor advisory

https://access.redhat.com/errata/RHSA-2022:6003

For tools and AI agents

This page as data: JSON · Markdown

Which servers are still behind?

Patchblox compares the installed package on every Linux machine against the fixed version for its release, including machines reported through Azure Update Manager.

Get a demo