Linux · Security advisory · April 11, 2023

RHSA-2023:1703: Security update for 26 packages

RHSA-2023:1703, released April 11, 2023, fixes 1 CVE across 26 products. One of them is being exploited (CVE-2023-0386); 1 on CISA KEV. Patch Radar priority: Patch now.

Patch now1 on CISA KEV
CVEs closed
1
None rated Critical
Exploited
1
CVE-2023-0386
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0788
94th percentile

Fixed package versions

ProductReleaseFixed in
bpftoolRHEL 90:5.14.0-162.23.1.el9_1
kernelRHEL 90:5.14.0-162.23.1.el9_1
kernel-abi-stablelistsRHEL 90:5.14.0-162.23.1.el9_1
kernel-coreRHEL 90:5.14.0-162.23.1.el9_1
kernel-debugRHEL 90:5.14.0-162.23.1.el9_1
kernel-debug-coreRHEL 90:5.14.0-162.23.1.el9_1
kernel-debug-develRHEL 90:5.14.0-162.23.1.el9_1
kernel-debug-devel-matchedRHEL 90:5.14.0-162.23.1.el9_1
kernel-debug-modulesRHEL 90:5.14.0-162.23.1.el9_1
kernel-debug-modules-extraRHEL 90:5.14.0-162.23.1.el9_1
kernel-develRHEL 90:5.14.0-162.23.1.el9_1
kernel-devel-matchedRHEL 90:5.14.0-162.23.1.el9_1
kernel-docRHEL 90:5.14.0-162.23.1.el9_1
kernel-modulesRHEL 90:5.14.0-162.23.1.el9_1
kernel-modules-extraRHEL 90:5.14.0-162.23.1.el9_1
kernel-toolsRHEL 90:5.14.0-162.23.1.el9_1
kernel-tools-libsRHEL 90:5.14.0-162.23.1.el9_1
kernel-tools-libs-develRHEL 90:5.14.0-162.23.1.el9_1
kernel-zfcpdumpRHEL 90:5.14.0-162.23.1.el9_1
kernel-zfcpdump-coreRHEL 90:5.14.0-162.23.1.el9_1
kernel-zfcpdump-develRHEL 90:5.14.0-162.23.1.el9_1
kernel-zfcpdump-devel-matchedRHEL 90:5.14.0-162.23.1.el9_1
kernel-zfcpdump-modulesRHEL 90:5.14.0-162.23.1.el9_1
kernel-zfcpdump-modules-extraRHEL 90:5.14.0-162.23.1.el9_1
perfRHEL 90:5.14.0-162.23.1.el9_1
python3-perfRHEL 90:5.14.0-162.23.1.el9_1

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
Patch now CVE-2023-0386 bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: s... 7.8 0.0788 KEVExploited
Showing 1 to 1 of 1 1