Linux · Security advisory · February 21, 2023

RHSA-2023:0839: Security update for 2 packages

RHSA-2023:0839, released February 21, 2023, fixes 2 CVEs across 2 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
2
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0541
92nd percentile

Priority of the 2 CVEs

Patch now 0 Urgent 0 High 2 Routine 0

Fixed package versions

ProductReleaseFixed in
kpatch-patch-4_18_0-425_10_1RHEL 80:1-1.el8_7
kpatch-patch-4_18_0-425_3_1RHEL 80:1-3.el8

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2022-43945 kernel-zfcpdump: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: m... 7.8 0.0541 None reported
High CVE-2022-41222 bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: m... 7.5 0.0049 None reported
Showing 1 to 2 of 2 1