Linux · Security advisory · May 9, 2023

RHSA-2023:2148: Security update for 14 packages

RHSA-2023:2148, released May 9, 2023, fixes 51 CVEs across 14 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
51
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0518
92nd percentile

Priority of the 51 CVEs

Patch now 0 Urgent 0 High 21 Routine 30

Fixed package versions

ProductReleaseFixed in
kernel-rtRHEL 90:5.14.0-284.11.1.rt14.296.el9_2
kernel-rt-coreRHEL 90:5.14.0-284.11.1.rt14.296.el9_2
kernel-rt-debugRHEL 90:5.14.0-284.11.1.rt14.296.el9_2
kernel-rt-debug-coreRHEL 90:5.14.0-284.11.1.rt14.296.el9_2
kernel-rt-debug-develRHEL 90:5.14.0-284.11.1.rt14.296.el9_2
kernel-rt-debug-kvmRHEL 90:5.14.0-284.11.1.rt14.296.el9_2
kernel-rt-debug-modulesRHEL 90:5.14.0-284.11.1.rt14.296.el9_2
kernel-rt-debug-modules-coreRHEL 90:5.14.0-284.11.1.rt14.296.el9_2
kernel-rt-debug-modules-extraRHEL 90:5.14.0-284.11.1.rt14.296.el9_2
kernel-rt-develRHEL 90:5.14.0-284.11.1.rt14.296.el9_2
kernel-rt-kvmRHEL 90:5.14.0-284.11.1.rt14.296.el9_2
kernel-rt-modulesRHEL 90:5.14.0-284.11.1.rt14.296.el9_2
kernel-rt-modules-coreRHEL 90:5.14.0-284.11.1.rt14.296.el9_2
kernel-rt-modules-extraRHEL 90:5.14.0-284.11.1.rt14.296.el9_2

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2022-41674 backport-iwlwifi-dkms: An issue was discovered in the Linux kernel before 5.19.16 8.1 0.0414 None reported
High CVE-2022-42896 bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: u... 8.8 0.0246 None reported
High CVE-2022-3640 kernel-devel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: t... 8.8 0.0121 None reported
High CVE-2022-3623 kernel-debug-modules-core: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * use-after... 7.5 0.0110 None reported
High CVE-2023-52340 linux: The IPv6 implementation in the Linux kernel before 6.3 has a net/ipv6/route.c max_size threshold that can be consumed... 8.0 0.0094 None reported
High CVE-2022-42720 backport-iwlwifi-dkms: Various refcounting bugs in the multi-BSS handling in the mac80211 stack in the Linux kernel 5.1 through 5.19.x befor... 7.8 0.0090 None reported
High CVE-2022-3566 linux: A vulnerability was identified in Linux Kernel up to 4.19.316/5.4.278/5.10.220/5.15.161 7.1 0.0074 None reported
High CVE-2023-0461 bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * use-after... 7.8 0.0065 None reported
High CVE-2021-33631 bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: v... 7.8 0.0037 None reported
High CVE-2022-1882 bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * use-after... 7.8 0.0037 None reported
High CVE-2022-33743 kernel-rt-kvm: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high... 7.8 0.0036 None reported
High CVE-2022-2196 linux: A regression exists in the Linux Kernel within KVM: nVMX that allowed for speculative execution attacks. L2 can carry... 8.8 0.0035 None reported
High CVE-2022-3625 kernel-debug-modules-core: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * use-after... 7.8 0.0035 None reported
High CVE-2022-39189 kernel-rt-kvm: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high... 7.8 0.0034 None reported
High CVE-2022-48695 kernel-rt-debug-devel: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high... 7.8 0.0024 None reported
High CVE-2023-2513 kernel-abi-stablelists: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: t... 7.0 0.0024 None reported
High CVE-2022-3028 kernel-rt-debug-modules-extra: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high... 7.0 0.0023 None reported
High CVE-2023-0590 kernel-abi-stablelists: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: t... 7.0 0.0023 None reported
High CVE-2021-47560 bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system 7.8 0.0022 None reported
High CVE-2022-20141 kernel-tools: The kernel packages contain the Linux kernel, the core of any Linux operating system. The following packages have be... 7.0 0.0015 None reported
High CVE-2022-3522 kernel-debug-modules-core: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * use-after... 7.0 n/a None reported
Routine CVE-2022-3435 kernel-debug-modules-extra: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * use-after... 5.5 0.0518 None reported
Routine CVE-2022-2663 kernel-rt: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high... 5.3 0.0407 None reported
Routine CVE-2022-3524 kernel-debug-modules-core: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * use-after... 5.5 0.0109 None reported
Routine CVE-2023-0394 bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * use-after... 6.5 0.0104 None reported
Showing 1 to 25 of 51 1Next