Linux · Security advisory · May 10, 2022

RLSA-2022:1975: kernel-rt security update

RLSA-2022:1975, released May 10, 2022, fixes 35 CVEs in kernel-rt (version 0:4.18.0-372.9.1.rt7.166.el8). None of them is reported as exploited. Patch Radar priority: High.

High

CVEs closed

None rated Critical

Exploited

None reported

Exploitation more likely

Vendor assessment

Highest EPSS

0.0690

94th percentile

Priority of the 35 CVEs

Patch now 0
                                Urgent 0
                                High 35
                                Routine 0

Fixed package versions

Product	Release	Fixed in
kernel-rt	rocky 8	0:4.18.0-372.9.1.rt7.166.el8

CVEs this fix closes

Priority	CVE	Title	CVSS	EPSS	Exploitation
High	CVE-2021-20322	kernel-debug-core: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: f...	8.2	0.0690	None reported
High	CVE-2021-3773	perf: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: f...	9.8	0.0528	None reported
High	CVE-2021-45485	bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: f...	8.2	0.0382	None reported
High	CVE-2021-4203	bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: f...	8.2	0.0175	None reported
High	CVE-2021-3752	bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: f...	8.2	0.0174	None reported
High	CVE-2021-4157	bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: f...	8.2	0.0158	None reported
High	CVE-2021-3772	bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: f...	8.2	0.0124	None reported
High	CVE-2022-1011	kernel-abi-stablelists: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: f...	8.2	0.0117	None reported
High	CVE-2021-29154	bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: f...	8.2	0.0093	None reported
High	CVE-2021-44733	bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: f...	8.2	0.0075	None reported
High	CVE-2021-3743	kernel-rt-core: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high...	8.2	0.0072	None reported
High	CVE-2021-43389	bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: f...	8.2	0.0072	None reported
High	CVE-2021-43976	kernel-debug: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: f...	8.2	0.0069	None reported
High	CVE-2021-3612	kernel-rt-debug-devel: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high...	8.2	0.0069	None reported
High	CVE-2020-13974	bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: f...	8.2	0.0057	None reported
High	CVE-2021-4197	kernel-rt-devel: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high...	8.2	0.0054	None reported
High	CVE-2021-3744	bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: f...	8.2	0.0053	None reported
High	CVE-2022-0286	bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: f...	8.2	0.0053	None reported
High	CVE-2021-4002	bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: f...	8.2	0.0052	None reported
High	CVE-2022-0001	Intel: CVE-2022-0001 Branch History Injection	8.2	0.0051	Exploitation Less Likely
High	CVE-2020-27820	bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: f...	8.2	0.0050	None reported
High	CVE-2021-42739	bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: f...	8.2	0.0047	None reported
High	CVE-2022-0002	bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: f...	8.2	0.0045	None reported
High	CVE-2021-41864	bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: f...	8.2	0.0041	None reported
High	CVE-2021-45486	bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: f...	8.2	0.0040	None reported

Also fixes CVE-2021-20322

ALSA-2022:1988
bpftool, kernel, kernel-abi-stablelists and 17 more on almalinux 8
RHSA-2022:1988
bpftool, kernel, kernel-abi-stablelists and 20 more on RHEL 8
RHSA-2022:1975
kernel-rt, kernel-rt-core, kernel-rt-debug and 9 more on RHEL 8
RLSA-2022:1988
kernel on rocky 8
ELSA-2022-1988
bpftool, kernel, kernel-abi-stablelists and 17 more on ol 8
DEBIAN-CVE-2021-20322
linux on Debian 12.15 (bookworm), Debian 13.5 (trixie), Debian 14

Vendor advisory

https://errata.rockylinux.org/RLSA-2022:1975

For tools and AI agents

This page as data: JSON · Markdown

Which servers are still behind?

Patchblox compares the installed package on every Linux machine against the fixed version for its release, including machines reported through Azure Update Manager.

Get a demo