Linux · Security advisory · May 9, 2023
RHSA-2023:2458: Security update for 46 packages
RHSA-2023:2458, released May 9, 2023, fixes 406 CVEs across 46 products. None of them is reported as exploited. Patch Radar priority: Urgent.
Urgent
CVEs closed
406
2 rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0518
92nd percentile
Priority of the 406 CVEs
Patch now 0
Urgent 2
High 140
Routine 264
Fixed package versions
| Product | Release | Fixed in |
|---|---|---|
| bpftool | RHEL 9 | 0:7.0.0-284.11.1.el9_2 |
| kernel | RHEL 9 | 0:5.14.0-284.11.1.el9_2 |
| kernel-64k | RHEL 9 | 0:5.14.0-284.11.1.el9_2 |
| kernel-64k-core | RHEL 9 | 0:5.14.0-284.11.1.el9_2 |
| kernel-64k-debug | RHEL 9 | 0:5.14.0-284.11.1.el9_2 |
| kernel-64k-debug-core | RHEL 9 | 0:5.14.0-284.11.1.el9_2 |
| kernel-64k-debug-devel | RHEL 9 | 0:5.14.0-284.11.1.el9_2 |
| kernel-64k-debug-devel-matched | RHEL 9 | 0:5.14.0-284.11.1.el9_2 |
| kernel-64k-debug-modules | RHEL 9 | 0:5.14.0-284.11.1.el9_2 |
| kernel-64k-debug-modules-core | RHEL 9 | 0:5.14.0-284.11.1.el9_2 |
| kernel-64k-debug-modules-extra | RHEL 9 | 0:5.14.0-284.11.1.el9_2 |
| kernel-64k-devel | RHEL 9 | 0:5.14.0-284.11.1.el9_2 |
| kernel-64k-devel-matched | RHEL 9 | 0:5.14.0-284.11.1.el9_2 |
| kernel-64k-modules | RHEL 9 | 0:5.14.0-284.11.1.el9_2 |
| kernel-64k-modules-core | RHEL 9 | 0:5.14.0-284.11.1.el9_2 |
| kernel-64k-modules-extra | RHEL 9 | 0:5.14.0-284.11.1.el9_2 |
| kernel-abi-stablelists | RHEL 9 | 0:5.14.0-284.11.1.el9_2 |
| kernel-core | RHEL 9 | 0:5.14.0-284.11.1.el9_2 |
| kernel-debug | RHEL 9 | 0:5.14.0-284.11.1.el9_2 |
| kernel-debug-core | RHEL 9 | 0:5.14.0-284.11.1.el9_2 |
| kernel-debug-devel | RHEL 9 | 0:5.14.0-284.11.1.el9_2 |
| kernel-debug-devel-matched | RHEL 9 | 0:5.14.0-284.11.1.el9_2 |
| kernel-debug-modules | RHEL 9 | 0:5.14.0-284.11.1.el9_2 |
| kernel-debug-modules-core | RHEL 9 | 0:5.14.0-284.11.1.el9_2 |
| kernel-debug-modules-extra | RHEL 9 | 0:5.14.0-284.11.1.el9_2 |
| kernel-debug-uki-virt | RHEL 9 | 0:5.14.0-284.11.1.el9_2 |
| kernel-devel | RHEL 9 | 0:5.14.0-284.11.1.el9_2 |
| kernel-devel-matched | RHEL 9 | 0:5.14.0-284.11.1.el9_2 |
| kernel-doc | RHEL 9 | 0:5.14.0-284.11.1.el9_2 |
| kernel-modules | RHEL 9 | 0:5.14.0-284.11.1.el9_2 |
| kernel-modules-core | RHEL 9 | 0:5.14.0-284.11.1.el9_2 |
| kernel-modules-extra | RHEL 9 | 0:5.14.0-284.11.1.el9_2 |
| kernel-tools | RHEL 9 | 0:5.14.0-284.11.1.el9_2 |
| kernel-tools-libs | RHEL 9 | 0:5.14.0-284.11.1.el9_2 |
| kernel-tools-libs-devel | RHEL 9 | 0:5.14.0-284.11.1.el9_2 |
| kernel-uki-virt | RHEL 9 | 0:5.14.0-284.11.1.el9_2 |
| kernel-zfcpdump | RHEL 9 | 0:5.14.0-284.11.1.el9_2 |
| kernel-zfcpdump-core | RHEL 9 | 0:5.14.0-284.11.1.el9_2 |
| kernel-zfcpdump-devel | RHEL 9 | 0:5.14.0-284.11.1.el9_2 |
| kernel-zfcpdump-devel-matched | RHEL 9 | 0:5.14.0-284.11.1.el9_2 |
| kernel-zfcpdump-modules | RHEL 9 | 0:5.14.0-284.11.1.el9_2 |
| kernel-zfcpdump-modules-core | RHEL 9 | 0:5.14.0-284.11.1.el9_2 |
| kernel-zfcpdump-modules-extra | RHEL 9 | 0:5.14.0-284.11.1.el9_2 |
| perf | RHEL 9 | 0:5.14.0-284.11.1.el9_2 |
| python3-perf | RHEL 9 | 0:5.14.0-284.11.1.el9_2 |
| rtla | RHEL 9 | 0:5.14.0-284.11.1.el9_2 |
CVEs this fix closes
| Priority | CVE | Title | Impact | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| Urgent | CVE-2022-50717 | linux: In the Linux kernel, the following vulnerability has been resolved: nvmet-tcp: add bounds check on Transfer Tag tta... | 9.8 | 0.0082 | None reported | |
| Urgent | CVE-2022-49362 | linux: In the Linux kernel, the following vulnerability has been resolved: NFSD: Fix potential use-after-free in nfsd_file_... | 9.8 | 0.0065 | None reported | |
| High | CVE-2022-41674 | backport-iwlwifi-dkms: An issue was discovered in the Linux kernel before 5.19.16 | 8.1 | 0.0414 | None reported | |
| High | CVE-2022-42896 | bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: u... | 8.8 | 0.0246 | None reported | |
| High | CVE-2022-3640 | kernel-devel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: t... | 8.8 | 0.0121 | None reported | |
| High | CVE-2022-3623 | kernel-debug-modules-core: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * use-after... | 7.5 | 0.0110 | None reported | |
| High | CVE-2023-52340 | linux: The IPv6 implementation in the Linux kernel before 6.3 has a net/ipv6/route.c max_size threshold that can be consumed... | 8.0 | 0.0094 | None reported | |
| High | CVE-2022-42720 | backport-iwlwifi-dkms: Various refcounting bugs in the multi-BSS handling in the mac80211 stack in the Linux kernel 5.1 through 5.19.x befor... | 7.8 | 0.0090 | None reported | |
| High | CVE-2022-49058 | bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: c... | 7.8 | 0.0087 | None reported | |
| High | CVE-2022-50668 | bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * use-after... | 8.0 | 0.0081 | None reported | |
| High | CVE-2022-3566 | linux: A vulnerability was identified in Linux Kernel up to 4.19.316/5.4.278/5.10.220/5.15.161 | 7.1 | 0.0074 | None reported | |
| High | CVE-2023-0461 | bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * use-after... | 7.8 | 0.0065 | None reported | |
| High | CVE-2022-50136 | kernel-devel: The kernel packages contain the Linux kernel, the core of any Linux operating system. The following packages have be... | 7.0 | 0.0062 | None reported | |
| High | CVE-2022-50861 | kernel-abi-stablelists: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: t... | 7.5 | 0.0058 | None reported | |
| High | CVE-2022-50235 | bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * use-after... | 7.8 | 0.0043 | None reported | |
| High | CVE-2022-50410 | bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * use-after... | 7.8 | 0.0043 | None reported | |
| High | CVE-2022-49328 | linux: In the Linux kernel, the following vulnerability has been resolved: mt76: fix use-after-free by removing a non-RCU w... | 8.8 | 0.0042 | None reported | |
| High | CVE-2022-50363 | bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * use-after... | 7.0 | 0.0041 | None reported | |
| High | CVE-2021-33631 | bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: v... | 7.8 | 0.0037 | None reported | |
| High | CVE-2022-50241 | bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * use-after... | 7.8 | 0.0037 | None reported | |
| High | CVE-2022-1882 | bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * use-after... | 7.8 | 0.0037 | None reported | |
| High | CVE-2022-33743 | kernel-rt-kvm: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high... | 7.8 | 0.0036 | None reported | |
| High | CVE-2022-49114 | linux: In the Linux kernel, the following vulnerability has been resolved: scsi: libfc: Fix use after free in fc_exch_abts_... | 8.8 | 0.0036 | None reported | |
| High | CVE-2022-2196 | linux: A regression exists in the Linux Kernel within KVM: nVMX that allowed for speculative execution attacks. L2 can carry... | 8.8 | 0.0035 | None reported | |
| High | CVE-2022-3625 | kernel-debug-modules-core: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * use-after... | 7.8 | 0.0035 | None reported |
Showing 1 to 25 of 406
1Next