Linux · Security advisory · November 28, 2023

RHSA-2023:7548: Security update for 12 packages

RHSA-2023:7548, released November 28, 2023, fixes 7 CVEs across 12 products. None of them is reported as exploited. Patch Radar priority: High.

High

CVEs closed

None rated Critical

Exploited

None reported

Exploitation more likely

Vendor assessment

Highest EPSS

0.0962

95th percentile

Priority of the 7 CVEs

Patch now 0
                                Urgent 0
                                High 5
                                Routine 2

Fixed package versions

Product	Release	Fixed in
kernel-rt	RHEL 8	0:4.18.0-513.9.1.rt7.311.el8_9
kernel-rt-core	RHEL 8	0:4.18.0-513.9.1.rt7.311.el8_9
kernel-rt-debug	RHEL 8	0:4.18.0-513.9.1.rt7.311.el8_9
kernel-rt-debug-core	RHEL 8	0:4.18.0-513.9.1.rt7.311.el8_9
kernel-rt-debug-devel	RHEL 8	0:4.18.0-513.9.1.rt7.311.el8_9
kernel-rt-debug-kvm	RHEL 8	0:4.18.0-513.9.1.rt7.311.el8_9
kernel-rt-debug-modules	RHEL 8	0:4.18.0-513.9.1.rt7.311.el8_9
kernel-rt-debug-modules-extra	RHEL 8	0:4.18.0-513.9.1.rt7.311.el8_9
kernel-rt-devel	RHEL 8	0:4.18.0-513.9.1.rt7.311.el8_9
kernel-rt-kvm	RHEL 8	0:4.18.0-513.9.1.rt7.311.el8_9
kernel-rt-modules	RHEL 8	0:4.18.0-513.9.1.rt7.311.el8_9
kernel-rt-modules-extra	RHEL 8	0:4.18.0-513.9.1.rt7.311.el8_9

CVEs this fix closes

Priority	CVE	Title	CVSS	EPSS	Exploitation
High	CVE-2023-5178	bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: b...	9.8	0.0962	None reported
High	CVE-2023-2163	bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: b...	8.8	0.0364	None reported
High	CVE-2023-3812	bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: b...	7.8	0.0034	None reported
High	CVE-2022-45886	bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: b...	7.0	0.0033	None reported
High	CVE-2022-45919	kernel-rt-debug-core: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high...	7.0	0.0027	None reported
Routine	CVE-2023-1192	bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: b...	6.5	0.0110	None reported
Routine	CVE-2022-45884	bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: b...	6.4	0.0034	None reported

Also fixes CVE-2023-5178

RHSA-2024:0461
bpftool, kernel, kernel-64k and 59 more on RHEL 9
ELSA-2024-0461
bpftool, kernel, kernel-abi-stablelists and 24 more on ol 9
ELSA-2023-13043
bpftool, kernel-uek, kernel-uek-container and 11 more on ol 8, ol 9
RHSA-2023:7549
bpftool, kernel, kernel-abi-stablelists and 20 more on RHEL 8
RXSA-2023:7549
kernel on rocky 8
RLSA-2023:7548
kernel-rt on rocky 8
ELSA-2023-7549
bpftool, kernel, kernel-abi-stablelists and 17 more on ol 8
ALSA-2023:7549
bpftool, kernel, kernel-abi-stablelists and 21 more on almalinux 8

Vendor advisory

https://access.redhat.com/errata/RHSA-2023:7548

For tools and AI agents

This page as data: JSON · Markdown

Which servers are still behind?

Patchblox compares the installed package on every Linux machine against the fixed version for its release, including machines reported through Azure Update Manager.

Get a demo