Linux · Security advisory · December 12, 2023

RHSA-2023:7749: Security update for 62 packages

RHSA-2023:7749, released December 12, 2023, fixes 5 CVEs across 62 products. None of them is reported as exploited. Patch Radar priority: Urgent.

Urgent

CVEs closed

1 rated Critical

Exploited

None reported

Exploitation more likely

Vendor assessment

Highest EPSS

0.0730

94th percentile

Priority of the 5 CVEs

Patch now 0
                                Urgent 1
                                High 2
                                Routine 2

Fixed package versions

Product	Release	Fixed in
bpftool	RHEL 9	0:7.2.0-362.13.1.el9_3
kernel	RHEL 9	0:5.14.0-362.13.1.el9_3
kernel-64k	RHEL 9	0:5.14.0-362.13.1.el9_3
kernel-64k-core	RHEL 9	0:5.14.0-362.13.1.el9_3
kernel-64k-debug	RHEL 9	0:5.14.0-362.13.1.el9_3
kernel-64k-debug-core	RHEL 9	0:5.14.0-362.13.1.el9_3
kernel-64k-debug-devel	RHEL 9	0:5.14.0-362.13.1.el9_3
kernel-64k-debug-devel-matched	RHEL 9	0:5.14.0-362.13.1.el9_3
kernel-64k-debug-modules	RHEL 9	0:5.14.0-362.13.1.el9_3
kernel-64k-debug-modules-core	RHEL 9	0:5.14.0-362.13.1.el9_3
kernel-64k-debug-modules-extra	RHEL 9	0:5.14.0-362.13.1.el9_3
kernel-64k-devel	RHEL 9	0:5.14.0-362.13.1.el9_3
kernel-64k-devel-matched	RHEL 9	0:5.14.0-362.13.1.el9_3
kernel-64k-modules	RHEL 9	0:5.14.0-362.13.1.el9_3
kernel-64k-modules-core	RHEL 9	0:5.14.0-362.13.1.el9_3
kernel-64k-modules-extra	RHEL 9	0:5.14.0-362.13.1.el9_3
kernel-abi-stablelists	RHEL 9	0:5.14.0-362.13.1.el9_3
kernel-core	RHEL 9	0:5.14.0-362.13.1.el9_3
kernel-debug	RHEL 9	0:5.14.0-362.13.1.el9_3
kernel-debug-core	RHEL 9	0:5.14.0-362.13.1.el9_3
kernel-debug-devel	RHEL 9	0:5.14.0-362.13.1.el9_3
kernel-debug-devel-matched	RHEL 9	0:5.14.0-362.13.1.el9_3
kernel-debug-modules	RHEL 9	0:5.14.0-362.13.1.el9_3
kernel-debug-modules-core	RHEL 9	0:5.14.0-362.13.1.el9_3
kernel-debug-modules-extra	RHEL 9	0:5.14.0-362.13.1.el9_3
kernel-debug-uki-virt	RHEL 9	0:5.14.0-362.13.1.el9_3
kernel-devel	RHEL 9	0:5.14.0-362.13.1.el9_3
kernel-devel-matched	RHEL 9	0:5.14.0-362.13.1.el9_3
kernel-doc	RHEL 9	0:5.14.0-362.13.1.el9_3
kernel-modules	RHEL 9	0:5.14.0-362.13.1.el9_3
kernel-modules-core	RHEL 9	0:5.14.0-362.13.1.el9_3
kernel-modules-extra	RHEL 9	0:5.14.0-362.13.1.el9_3
kernel-rt	RHEL 9	0:5.14.0-362.13.1.el9_3
kernel-rt-core	RHEL 9	0:5.14.0-362.13.1.el9_3
kernel-rt-debug	RHEL 9	0:5.14.0-362.13.1.el9_3
kernel-rt-debug-core	RHEL 9	0:5.14.0-362.13.1.el9_3
kernel-rt-debug-devel	RHEL 9	0:5.14.0-362.13.1.el9_3
kernel-rt-debug-kvm	RHEL 9	0:5.14.0-362.13.1.el9_3
kernel-rt-debug-modules	RHEL 9	0:5.14.0-362.13.1.el9_3
kernel-rt-debug-modules-core	RHEL 9	0:5.14.0-362.13.1.el9_3
kernel-rt-debug-modules-extra	RHEL 9	0:5.14.0-362.13.1.el9_3
kernel-rt-devel	RHEL 9	0:5.14.0-362.13.1.el9_3
kernel-rt-kvm	RHEL 9	0:5.14.0-362.13.1.el9_3
kernel-rt-modules	RHEL 9	0:5.14.0-362.13.1.el9_3
kernel-rt-modules-core	RHEL 9	0:5.14.0-362.13.1.el9_3
kernel-rt-modules-extra	RHEL 9	0:5.14.0-362.13.1.el9_3
kernel-tools	RHEL 9	0:5.14.0-362.13.1.el9_3
kernel-tools-libs	RHEL 9	0:5.14.0-362.13.1.el9_3
kernel-tools-libs-devel	RHEL 9	0:5.14.0-362.13.1.el9_3
kernel-uki-virt	RHEL 9	0:5.14.0-362.13.1.el9_3
kernel-zfcpdump	RHEL 9	0:5.14.0-362.13.1.el9_3
kernel-zfcpdump-core	RHEL 9	0:5.14.0-362.13.1.el9_3
kernel-zfcpdump-devel	RHEL 9	0:5.14.0-362.13.1.el9_3
kernel-zfcpdump-devel-matched	RHEL 9	0:5.14.0-362.13.1.el9_3
kernel-zfcpdump-modules	RHEL 9	0:5.14.0-362.13.1.el9_3
kernel-zfcpdump-modules-core	RHEL 9	0:5.14.0-362.13.1.el9_3
kernel-zfcpdump-modules-extra	RHEL 9	0:5.14.0-362.13.1.el9_3
libperf	RHEL 9	0:5.14.0-362.13.1.el9_3
perf	RHEL 9	0:5.14.0-362.13.1.el9_3
python3-perf	RHEL 9	0:5.14.0-362.13.1.el9_3
rtla	RHEL 9	0:5.14.0-362.13.1.el9_3
rv	RHEL 9	0:5.14.0-362.13.1.el9_3

CVEs this fix closes

Priority	CVE	Title	CVSS	EPSS	Exploitation
Urgent	CVE-2023-53996	kernel-default: The SUSE Linux Enterprise 15 SP6 kernel was updated to fix various security issues The following security issues wer...	9.3	0.0011	None reported
High	CVE-2023-45871	kernel-rt: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high...	7.5	0.0064	None reported
High	CVE-2023-5345	kernel-tools: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: u...	7.8	0.0049	None reported
Routine	CVE-2023-20569	AMD: CVE-2023-20569 Return Address Predictor	5.6	0.0730	Exploitation Less Likely
Routine	CVE-2023-1192	bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: b...	6.5	0.0110	None reported

Also fixes CVE-2023-53996

RHSA-2024:3138
bpftool, kernel, kernel-abi-stablelists and 20 more on RHEL 8
RXSA-2024:3138
kernel on rocky 8
SUSE-SU-2026:0315-1
kernel-64kb, kernel-default, kernel-default-base and 6 more on sles 15.7
SUSE-SU-2026:0281-1
kernel-azure, kernel-source-azure, kernel-syms-azure on sles 15.7
SUSE-SU-2026:0278-1
kernel-livepatch-SLE15-SP7-RT_Update_8 on sles 15.7
SUSE-SU-2026:0293-1
dtb-aarch64, kernel-64kb, kernel-debug and 10 more on opensuse-leap 15.6, sles 15.6
ALAS2023-2023-356
bpftool, bpftool-debuginfo, kernel and 16 more on amzn 2023
DEBIAN-CVE-2023-53996
linux on Debian 12.15 (bookworm), Debian 13.5 (trixie), Debian 14

Vendor advisory

https://access.redhat.com/errata/RHSA-2023:7749

For tools and AI agents

This page as data: JSON · Markdown

Which servers are still behind?

Patchblox compares the installed package on every Linux machine against the fixed version for its release, including machines reported through Azure Update Manager.

Get a demo