Linux · Security advisory · October 25, 2022

RLSA-2022:7134: kernel-rt security update

RLSA-2022:7134, released October 25, 2022, fixes 7 CVEs in kernel-rt (version 0:4.18.0-372.32.1.rt7.189.el8_6). None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
7
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0587
93rd percentile

Priority of the 7 CVEs

Patch now 0 Urgent 0 High 7 Routine 0

Fixed package versions

ProductReleaseFixed in
kernel-rtrocky 80:4.18.0-372.32.1.rt7.189.el8_6

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2022-2588 bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * A use-aft... 7.8 0.0587 None reported
High CVE-2022-29901 bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * A use-aft... 7.8 0.0501 None reported
High CVE-2022-29900 AMD: CVE-2022-29900 AMD CPU Branch Type Confusion 7.8 0.0394 Exploitation Less Likely
High CVE-2022-23825 AMD: CVE-2022-23825 AMD CPU Branch Type Confusion 7.8 0.0079 Exploitation Less Likely
High CVE-2022-0494 bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * A use-aft... 7.8 0.0042 None reported
High CVE-2022-1353 kernel-tools-libs-devel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * off-path... 7.8 0.0040 None reported
High CVE-2022-23816 kernel-tools-libs-devel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * A use-aft... 7.8 n/a None reported
Showing 1 to 7 of 7 1