Linux · Security advisory · March 27, 2023

RHSA-2023:1470: Security update for 26 packages

RHSA-2023:1470, released March 27, 2023, fixes 3 CVEs across 26 products. One of them is being exploited (CVE-2023-0266); 1 on CISA KEV. Patch Radar priority: Patch now.

Patch now1 on CISA KEV

CVEs closed

None rated Critical

Exploited

CVE-2023-0266

Exploitation more likely

Vendor assessment

Highest EPSS

0.0370

89th percentile

Priority of the 3 CVEs

Patch now 1
                                Urgent 0
                                High 2
                                Routine 0

Fixed package versions

Product	Release	Fixed in
bpftool	RHEL 9	0:5.14.0-162.22.2.el9_1
kernel	RHEL 9	0:5.14.0-162.22.2.el9_1
kernel-abi-stablelists	RHEL 9	0:5.14.0-162.22.2.el9_1
kernel-core	RHEL 9	0:5.14.0-162.22.2.el9_1
kernel-debug	RHEL 9	0:5.14.0-162.22.2.el9_1
kernel-debug-core	RHEL 9	0:5.14.0-162.22.2.el9_1
kernel-debug-devel	RHEL 9	0:5.14.0-162.22.2.el9_1
kernel-debug-devel-matched	RHEL 9	0:5.14.0-162.22.2.el9_1
kernel-debug-modules	RHEL 9	0:5.14.0-162.22.2.el9_1
kernel-debug-modules-extra	RHEL 9	0:5.14.0-162.22.2.el9_1
kernel-devel	RHEL 9	0:5.14.0-162.22.2.el9_1
kernel-devel-matched	RHEL 9	0:5.14.0-162.22.2.el9_1
kernel-doc	RHEL 9	0:5.14.0-162.22.2.el9_1
kernel-modules	RHEL 9	0:5.14.0-162.22.2.el9_1
kernel-modules-extra	RHEL 9	0:5.14.0-162.22.2.el9_1
kernel-tools	RHEL 9	0:5.14.0-162.22.2.el9_1
kernel-tools-libs	RHEL 9	0:5.14.0-162.22.2.el9_1
kernel-tools-libs-devel	RHEL 9	0:5.14.0-162.22.2.el9_1
kernel-zfcpdump	RHEL 9	0:5.14.0-162.22.2.el9_1
kernel-zfcpdump-core	RHEL 9	0:5.14.0-162.22.2.el9_1
kernel-zfcpdump-devel	RHEL 9	0:5.14.0-162.22.2.el9_1
kernel-zfcpdump-devel-matched	RHEL 9	0:5.14.0-162.22.2.el9_1
kernel-zfcpdump-modules	RHEL 9	0:5.14.0-162.22.2.el9_1
kernel-zfcpdump-modules-extra	RHEL 9	0:5.14.0-162.22.2.el9_1
perf	RHEL 9	0:5.14.0-162.22.2.el9_1
python3-perf	RHEL 9	0:5.14.0-162.22.2.el9_1

CVEs this fix closes

Priority	CVE	Title	CVSS	EPSS	Exploitation
Patch now	CVE-2023-0266	bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: s...	7.8	0.0370	KEVExploited
High	CVE-2022-4744	kernel-devel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: t...	7.8	0.0046	None reported
High	CVE-2022-4269	kernel-debug-devel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: s...	7.8	0.0020	None reported

Also fixes CVE-2023-0266

RXSA-2023:1566
kernel on rocky 8
RLSA-2023:1584
kernel-rt on rocky 8
ELSA-2023-1566
bpftool, kernel, kernel-abi-stablelists and 17 more on ol 8
RHSA-2023:1659
kpatch-patch-4_18_0-425_10_1, kpatch-patch-4_18_0-425_13_1, kpatch-patch-4_18_0-425_3_1 on RHEL 8
ALSA-2023:1566
bpftool, kernel, kernel-abi-stablelists and 21 more on almalinux 8
ALSA-2023:1584
kernel-rt, kernel-rt-core, kernel-rt-debug and 9 more on almalinux 8
RHSA-2023:1566
bpftool, kernel, kernel-abi-stablelists and 20 more on RHEL 8
RHSA-2023:1584
kernel-rt, kernel-rt-core, kernel-rt-debug and 9 more on RHEL 8

Vendor advisory

https://access.redhat.com/errata/RHSA-2023:1470

For tools and AI agents

This page as data: JSON · Markdown

Which servers are still behind?

Patchblox compares the installed package on every Linux machine against the fixed version for its release, including machines reported through Azure Update Manager.

Get a demo