Linux · Security advisory · October 25, 2022

RHSA-2022:7185: device-mapper-multipath security update

RHSA-2022:7185, released October 25, 2022, fixes 1 CVE in device-mapper-multipath (version 0:0.8.7-7.el9_0.1). None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
1
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0063
50th percentile

Fixed package versions

ProductReleaseFixed in
device-mapper-multipathRHEL 90:0.8.7-7.el9_0.1

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2022-41974 multipath-tools-boot: multipath-tools 0.7.0 through 0.9.x before 0.9.2 allows local users to obtain root access, as exploited alone or in c... 7.8 0.0063 None reported
Showing 1 to 1 of 1 1