Linux · Security advisory · September 13, 2022

RHSA-2022:6437: Security update for 12 packages

RHSA-2022:6437, released September 13, 2022, fixes 3 CVEs across 12 products. None of them is reported as exploited. Patch Radar priority: Routine.

Routine

CVEs closed

None rated Critical

Exploited

None reported

Exploitation more likely

Vendor assessment

Highest EPSS

0.0687

94th percentile

Priority of the 3 CVEs

Patch now 0
                                Urgent 0
                                High 0
                                Routine 3

Fixed package versions

Product	Release	Fixed in
kernel-rt	RHEL 8	0:4.18.0-372.26.1.rt7.183.el8_6
kernel-rt-core	RHEL 8	0:4.18.0-372.26.1.rt7.183.el8_6
kernel-rt-debug	RHEL 8	0:4.18.0-372.26.1.rt7.183.el8_6
kernel-rt-debug-core	RHEL 8	0:4.18.0-372.26.1.rt7.183.el8_6
kernel-rt-debug-devel	RHEL 8	0:4.18.0-372.26.1.rt7.183.el8_6
kernel-rt-debug-kvm	RHEL 8	0:4.18.0-372.26.1.rt7.183.el8_6
kernel-rt-debug-modules	RHEL 8	0:4.18.0-372.26.1.rt7.183.el8_6
kernel-rt-debug-modules-extra	RHEL 8	0:4.18.0-372.26.1.rt7.183.el8_6
kernel-rt-devel	RHEL 8	0:4.18.0-372.26.1.rt7.183.el8_6
kernel-rt-kvm	RHEL 8	0:4.18.0-372.26.1.rt7.183.el8_6
kernel-rt-modules	RHEL 8	0:4.18.0-372.26.1.rt7.183.el8_6
kernel-rt-modules-extra	RHEL 8	0:4.18.0-372.26.1.rt7.183.el8_6

CVEs this fix closes

Priority	CVE	Title	CVSS	EPSS	Exploitation
Routine	CVE-2022-21123	Intel: CVE-2022-21123 Shared Buffers Data Read (SBDR)	6.1	0.0687	Exploitation Less Likely
Routine	CVE-2022-21125	Intel: CVE-2022-21125 Shared Buffers Data Sampling (SBDS)	6.1	0.0645	Exploitation Less Likely
Routine	CVE-2022-21166	Intel: CVE-2022-21166 Device Register Partial Write (DRPW)	6.1	0.0645	Exploitation Less Likely

Also fixes CVE-2022-21123

ALAS2023-2023-070
bpftool, bpftool-debuginfo, kernel and 16 more on amzn 2023
KB5014699
Windows 10 Version 20H2 for 32-bit Systems, Windows 10 Version 20H2 for ARM64-based Systems, Windows 10 Version 21H1 for 32-bit Systems and 6 more
KB5014692
Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for ARM64-based Systems, Windows 10 Version 1809 for x64-based Systems and 2 more
KB5014678
Windows Server 2022, Windows Server 2022 (Server Core installation)
KB5014702
Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows Server 2016 and 1 more
KB5014697
Windows 11 version 21H2 for ARM64-based Systems, Windows 11 version 21H2 for x64-based Systems
KB5014738
Windows 8.1 for 32-bit systems, Windows 8.1 for x64-based systems, Windows RT 8.1 and 2 more
KB5014746
Windows 8.1 for 32-bit systems, Windows 8.1 for x64-based systems, Windows Server 2012 R2 and 1 more

Vendor advisory

https://access.redhat.com/errata/RHSA-2022:6437

For tools and AI agents

This page as data: JSON · Markdown

Which servers are still behind?

Patchblox compares the installed package on every Linux machine against the fixed version for its release, including machines reported through Azure Update Manager.

Get a demo