Linux · Security advisory · September 19, 2023

RLSA-2023:5091: kernel-rt security update

RLSA-2023:5091, released September 19, 2023, fixes 10 CVEs in kernel-rt (version 0:5.14.0-284.30.1.rt14.315.el9_2). None of them is reported as exploited. Patch Radar priority: High.

High

CVEs closed

None rated Critical

Exploited

None reported

Exploitation more likely

Vendor assessment

Highest EPSS

0.0507

92nd percentile

Priority of the 10 CVEs

Patch now 0
                                Urgent 0
                                High 9
                                Routine 1

Fixed package versions

Product	Release	Fixed in
kernel-rt	rocky 9	0:5.14.0-284.30.1.rt14.315.el9_2

CVEs this fix closes

Priority	CVE	Title	CVSS	EPSS	Exploitation
High	CVE-2023-20593	amd64-microcode: An issue in “Zen 2” CPUs, under specific microarchitectural circumstances,may allow an attacker to potentially access...	7.8	0.0507	None reported
High	CVE-2023-31248	kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu...	7.8	0.0189	None reported
High	CVE-2023-35001	bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: i...	7.8	0.0154	None reported
High	CVE-2023-4004	bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: i...	7.8	0.0092	None reported
High	CVE-2023-3390	linux: A use-after-free vulnerability was found in the Linux kernel's netfilter subsystem in net/netfilter/nf_tables_api.c	7.8	0.0091	None reported
High	CVE-2023-4147	linux: A use-after-free flaw was found in the Linux kernel’s Netfilter functionality when adding a rule with NFTA_RULE_CHAIN_ID	7.8	0.0055	None reported
High	CVE-2023-3776	kernel-abi-stablelists: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: i...	7.8	0.0051	None reported
High	CVE-2023-3610	bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. The following packages have be...	7.8	0.0025	None reported
High	CVE-2023-21102	kernel-64k-debug-modules-core: The kernel packages contain the Linux kernel, the core of any Linux operating system. The following packages have be...	7.8	0.0018	None reported
Routine	CVE-2023-1637	kernel-core: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: i...	5.5	0.0022	None reported

Also fixes CVE-2023-20593

RHSA-2023:5069
bpftool, kernel, kernel-64k and 43 more on RHEL 9
RHSA-2023:5244
bpftool, kernel, kernel-abi-stablelists and 20 more on RHEL 8
ALAS2023-2023-285
bpftool, bpftool-debuginfo, kernel and 16 more on amzn 2023
ALSA-2023:5069
bpftool, kernel, kernel-64k and 42 more on almalinux 9
ALSA-2023:5091
kernel-rt, kernel-rt-core, kernel-rt-debug and 11 more on almalinux 9
RHSA-2023:5091
kernel-rt, kernel-rt-core, kernel-rt-debug and 11 more on RHEL 9
RHSA-2023:5255
kernel-rt, kernel-rt-core, kernel-rt-debug and 9 more on RHEL 8
RXSA-2023:5244
kernel on rocky 8

Vendor advisory

https://errata.rockylinux.org/RLSA-2023:5091

For tools and AI agents

This page as data: JSON · Markdown

Which servers are still behind?

Patchblox compares the installed package on every Linux machine against the fixed version for its release, including machines reported through Azure Update Manager.

Get a demo