Linux · Security advisory · November 7, 2023
RHSA-2023:6583: Security update for 62 packages
RHSA-2023:6583, released November 7, 2023, fixes 493 CVEs across 62 products. None of them is reported as exploited. Patch Radar priority: Urgent.
Urgent
CVEs closed
493
2 rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.1620
96th percentile
Priority of the 493 CVEs
Patch now 0
Urgent 2
High 138
Routine 353
Fixed package versions
| Product | Release | Fixed in |
|---|---|---|
| bpftool | RHEL 9 | 0:7.2.0-362.8.1.el9_3 |
| kernel | RHEL 9 | 0:5.14.0-362.8.1.el9_3 |
| kernel-64k | RHEL 9 | 0:5.14.0-362.8.1.el9_3 |
| kernel-64k-core | RHEL 9 | 0:5.14.0-362.8.1.el9_3 |
| kernel-64k-debug | RHEL 9 | 0:5.14.0-362.8.1.el9_3 |
| kernel-64k-debug-core | RHEL 9 | 0:5.14.0-362.8.1.el9_3 |
| kernel-64k-debug-devel | RHEL 9 | 0:5.14.0-362.8.1.el9_3 |
| kernel-64k-debug-devel-matched | RHEL 9 | 0:5.14.0-362.8.1.el9_3 |
| kernel-64k-debug-modules | RHEL 9 | 0:5.14.0-362.8.1.el9_3 |
| kernel-64k-debug-modules-core | RHEL 9 | 0:5.14.0-362.8.1.el9_3 |
| kernel-64k-debug-modules-extra | RHEL 9 | 0:5.14.0-362.8.1.el9_3 |
| kernel-64k-devel | RHEL 9 | 0:5.14.0-362.8.1.el9_3 |
| kernel-64k-devel-matched | RHEL 9 | 0:5.14.0-362.8.1.el9_3 |
| kernel-64k-modules | RHEL 9 | 0:5.14.0-362.8.1.el9_3 |
| kernel-64k-modules-core | RHEL 9 | 0:5.14.0-362.8.1.el9_3 |
| kernel-64k-modules-extra | RHEL 9 | 0:5.14.0-362.8.1.el9_3 |
| kernel-abi-stablelists | RHEL 9 | 0:5.14.0-362.8.1.el9_3 |
| kernel-core | RHEL 9 | 0:5.14.0-362.8.1.el9_3 |
| kernel-debug | RHEL 9 | 0:5.14.0-362.8.1.el9_3 |
| kernel-debug-core | RHEL 9 | 0:5.14.0-362.8.1.el9_3 |
| kernel-debug-devel | RHEL 9 | 0:5.14.0-362.8.1.el9_3 |
| kernel-debug-devel-matched | RHEL 9 | 0:5.14.0-362.8.1.el9_3 |
| kernel-debug-modules | RHEL 9 | 0:5.14.0-362.8.1.el9_3 |
| kernel-debug-modules-core | RHEL 9 | 0:5.14.0-362.8.1.el9_3 |
| kernel-debug-modules-extra | RHEL 9 | 0:5.14.0-362.8.1.el9_3 |
| kernel-debug-uki-virt | RHEL 9 | 0:5.14.0-362.8.1.el9_3 |
| kernel-devel | RHEL 9 | 0:5.14.0-362.8.1.el9_3 |
| kernel-devel-matched | RHEL 9 | 0:5.14.0-362.8.1.el9_3 |
| kernel-doc | RHEL 9 | 0:5.14.0-362.8.1.el9_3 |
| kernel-modules | RHEL 9 | 0:5.14.0-362.8.1.el9_3 |
| kernel-modules-core | RHEL 9 | 0:5.14.0-362.8.1.el9_3 |
| kernel-modules-extra | RHEL 9 | 0:5.14.0-362.8.1.el9_3 |
| kernel-rt | RHEL 9 | 0:5.14.0-362.8.1.el9_3 |
| kernel-rt-core | RHEL 9 | 0:5.14.0-362.8.1.el9_3 |
| kernel-rt-debug | RHEL 9 | 0:5.14.0-362.8.1.el9_3 |
| kernel-rt-debug-core | RHEL 9 | 0:5.14.0-362.8.1.el9_3 |
| kernel-rt-debug-devel | RHEL 9 | 0:5.14.0-362.8.1.el9_3 |
| kernel-rt-debug-kvm | RHEL 9 | 0:5.14.0-362.8.1.el9_3 |
| kernel-rt-debug-modules | RHEL 9 | 0:5.14.0-362.8.1.el9_3 |
| kernel-rt-debug-modules-core | RHEL 9 | 0:5.14.0-362.8.1.el9_3 |
| kernel-rt-debug-modules-extra | RHEL 9 | 0:5.14.0-362.8.1.el9_3 |
| kernel-rt-devel | RHEL 9 | 0:5.14.0-362.8.1.el9_3 |
| kernel-rt-kvm | RHEL 9 | 0:5.14.0-362.8.1.el9_3 |
| kernel-rt-modules | RHEL 9 | 0:5.14.0-362.8.1.el9_3 |
| kernel-rt-modules-core | RHEL 9 | 0:5.14.0-362.8.1.el9_3 |
| kernel-rt-modules-extra | RHEL 9 | 0:5.14.0-362.8.1.el9_3 |
| kernel-tools | RHEL 9 | 0:5.14.0-362.8.1.el9_3 |
| kernel-tools-libs | RHEL 9 | 0:5.14.0-362.8.1.el9_3 |
| kernel-tools-libs-devel | RHEL 9 | 0:5.14.0-362.8.1.el9_3 |
| kernel-uki-virt | RHEL 9 | 0:5.14.0-362.8.1.el9_3 |
| kernel-zfcpdump | RHEL 9 | 0:5.14.0-362.8.1.el9_3 |
| kernel-zfcpdump-core | RHEL 9 | 0:5.14.0-362.8.1.el9_3 |
| kernel-zfcpdump-devel | RHEL 9 | 0:5.14.0-362.8.1.el9_3 |
| kernel-zfcpdump-devel-matched | RHEL 9 | 0:5.14.0-362.8.1.el9_3 |
| kernel-zfcpdump-modules | RHEL 9 | 0:5.14.0-362.8.1.el9_3 |
| kernel-zfcpdump-modules-core | RHEL 9 | 0:5.14.0-362.8.1.el9_3 |
| kernel-zfcpdump-modules-extra | RHEL 9 | 0:5.14.0-362.8.1.el9_3 |
| libperf | RHEL 9 | 0:5.14.0-362.8.1.el9_3 |
| perf | RHEL 9 | 0:5.14.0-362.8.1.el9_3 |
| python3-perf | RHEL 9 | 0:5.14.0-362.8.1.el9_3 |
| rtla | RHEL 9 | 0:5.14.0-362.8.1.el9_3 |
| rv | RHEL 9 | 0:5.14.0-362.8.1.el9_3 |
CVEs this fix closes
| Priority | CVE | Title | Impact | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| Urgent | CVE-2023-54269 | linux: In the Linux kernel, the following vulnerability has been resolved: SUNRPC: double free xprt_ctxt while still in use... | 9.8 | 0.0055 | None reported | |
| Urgent | CVE-2023-53867 | linux: In the Linux kernel, the following vulnerability has been resolved: ceph: fix potential use-after-free bug when trim... | 9.8 | 0.0053 | None reported | |
| High | CVE-2023-1380 | bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: n... | 7.1 | 0.1620 | None reported | |
| High | CVE-2023-2156 | bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: n... | 7.5 | 0.0618 | None reported | |
| High | CVE-2023-52735 | kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu... | 9.1 | 0.0122 | None reported | |
| High | CVE-2022-50671 | linux: In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Fix "kernel NULL pointer dereference"... | 7.5 | 0.0095 | None reported | |
| High | CVE-2023-3640 | bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: n... | 7.0 | 0.0076 | None reported | |
| High | CVE-2022-50885 | linux: In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Fix NULL-ptr-deref in rxe_qp_do_cleanu... | 7.5 | 0.0060 | None reported | |
| High | CVE-2023-54306 | python3-perf: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: n... | 7.5 | 0.0060 | None reported | |
| High | CVE-2023-4206 | linux: A use-after-free vulnerability in the Linux kernel's net/sched: cls_route component can be exploited to achieve local... | 7.8 | 0.0059 | None reported | |
| High | CVE-2023-54004 | linux: In the Linux kernel, the following vulnerability has been resolved: udplite: Fix NULL pointer dereference in __sk_me... | 8.0 | 0.0059 | None reported | |
| High | CVE-2023-53705 | linux: In the Linux kernel, the following vulnerability has been resolved: ipv6: Fix out-of-bounds access in ipv6_find_tlv(... | 8.2 | 0.0056 | None reported | |
| High | CVE-2023-53116 | bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: n... | 7.8 | 0.0055 | None reported | |
| High | CVE-2023-39191 | bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: n... | 8.2 | 0.0053 | None reported | |
| High | CVE-2022-50865 | linux: In the Linux kernel, the following vulnerability has been resolved: tcp: fix a signed-integer-overflow bug in tcp_ad... | 7.8 | 0.0053 | None reported | |
| High | CVE-2023-3268 | kernel-abi-stablelists: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: t... | 7.1 | 0.0052 | None reported | |
| High | CVE-2023-3609 | linux: A use-after-free vulnerability in the Linux kernel's net/sched: cls_u32 component can be exploited to achieve local p... | 7.8 | 0.0049 | None reported | |
| High | CVE-2023-1989 | python3-perf: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: t... | 7.0 | 0.0044 | None reported | |
| High | CVE-2023-3141 | kernel-abi-stablelists: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: t... | 7.1 | 0.0043 | None reported | |
| High | CVE-2023-53372 | kernel-devel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: n... | 7.8 | 0.0039 | None reported | |
| High | CVE-2022-3565 | kernel-devel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): For more de... | 8.0 | 0.0035 | None reported | |
| High | CVE-2023-4207 | linux: A use-after-free vulnerability in the Linux kernel's net/sched: cls_fw component can be exploited to achieve local pr... | 7.8 | 0.0031 | None reported | |
| High | CVE-2023-4208 | kernel-rt: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high... | 7.8 | 0.0031 | None reported | |
| High | CVE-2023-54286 | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: t... | 7.6 | 0.0030 | None reported | |
| High | CVE-2023-0597 | kernel-abi-stablelists: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: t... | 7.0 | 0.0030 | None reported |
Showing 1 to 25 of 493
1Next