Linux · Security advisory · October 25, 2022

RHSA-2022:7137: Security update for 5 packages

RHSA-2022:7137, released October 25, 2022, fixes 1 CVE across 5 products. None of them is reported as exploited. Patch Radar priority: High.

High

CVEs closed

None rated Critical

Exploited

None reported

Exploitation more likely

Vendor assessment

Highest EPSS

0.0587

93rd percentile

Fixed package versions

Product	Release	Fixed in
kpatch-patch-4_18_0-372_13_1	RHEL 8	0:1-2.el8_6
kpatch-patch-4_18_0-372_16_1	RHEL 8	0:1-2.el8_6
kpatch-patch-4_18_0-372_19_1	RHEL 8	0:1-1.el8_6
kpatch-patch-4_18_0-372_26_1	RHEL 8	0:1-1.el8_6
kpatch-patch-4_18_0-372_9_1	RHEL 8	0:1-3.el8

CVEs this fix closes

Priority	CVE	Title	Impact	CVSS	EPSS	Exploitation
High	CVE-2022-2588	bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * A use-aft...		7.8	0.0587	None reported

Also fixes CVE-2022-2588

ALAS2023-2023-070
bpftool, bpftool-debuginfo, kernel and 16 more on amzn 2023
RHSA-2022:7110
bpftool, kernel, kernel-abi-stablelists and 20 more on RHEL 8
RHSA-2022:7134
kernel-rt, kernel-rt-core, kernel-rt-debug and 9 more on RHEL 8
ELSA-2022-7110
bpftool, kernel, kernel-abi-stablelists and 17 more on ol 8
RLSA-2022:7134
kernel-rt on rocky 8
RLSA-2022:7110
kernel on rocky 8
ALSA-2022:7110
bpftool, kernel, kernel-abi-stablelists and 17 more on almalinux 8
ALSA-2022:7134
kernel-rt, kernel-rt-core, kernel-rt-debug and 9 more on almalinux 8

Vendor advisory

https://access.redhat.com/errata/RHSA-2022:7137

For tools and AI agents

This page as data: JSON · Markdown

Which servers are still behind?

Patchblox compares the installed package on every Linux machine against the fixed version for its release, including machines reported through Azure Update Manager.

Get a demo