Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
centosCentOS ProjectCESA-2023:0399
HistoryJan 30, 2023 - 4:50 p.m.

bpftool, kernel, perf, python security update

2023-01-3016:50:20
CentOS Project
lists.centos.org
254

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

4.3 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:S/C:P/I:P/A:P

0.975 High

EPSS

Percentile

100.0%

JSON

CentOS Errata and Security Advisory CESA-2023:0399

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

  • kernel: memory corruption in AX88179_178A based USB ethernet device. (CVE-2022-2964)

  • hw: cpu: LFENCE/JMP Mitigation Update for CVE-2017-5715 (CVE-2021-26401)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

  • Prevent unnecessary resets - Avoid leaving shost->last_reset with stale value if EH does not run (BZ#2128337)

  • i40e: Request to backport upstream commit 2e5a20573a92 (BZ#2129248)

  • disable VMA-based swap-in readahead on PowerPC (BZ#2142455)

Merged security bulletin from advisories:
https://lists.centos.org/pipermail/centos-announce/2023-January/086370.html

Affected packages:
bpftool
kernel
kernel-abi-whitelists
kernel-debug
kernel-debug-devel
kernel-devel
kernel-doc
kernel-headers
kernel-tools
kernel-tools-libs
kernel-tools-libs-devel
perf
python-perf

Upstream details at:
https://access.redhat.com/errata/RHSA-2023:0399

OSVersionArchitecturePackageVersionFilename
CentOS7x86_64bpftool< 3.10.0-1160.83.1.el7bpftool-3.10.0-1160.83.1.el7.x86_64.rpm
CentOS7x86_64kernel< 3.10.0-1160.83.1.el7kernel-3.10.0-1160.83.1.el7.x86_64.rpm
CentOS7noarchkernel-abi-whitelists< 3.10.0-1160.83.1.el7kernel-abi-whitelists-3.10.0-1160.83.1.el7.noarch.rpm
CentOS7x86_64kernel-debug< 3.10.0-1160.83.1.el7kernel-debug-3.10.0-1160.83.1.el7.x86_64.rpm
CentOS7x86_64kernel-debug-devel< 3.10.0-1160.83.1.el7kernel-debug-devel-3.10.0-1160.83.1.el7.x86_64.rpm
CentOS7x86_64kernel-devel< 3.10.0-1160.83.1.el7kernel-devel-3.10.0-1160.83.1.el7.x86_64.rpm
CentOS7noarchkernel-doc< 3.10.0-1160.83.1.el7kernel-doc-3.10.0-1160.83.1.el7.noarch.rpm
CentOS7x86_64kernel-headers< 3.10.0-1160.83.1.el7kernel-headers-3.10.0-1160.83.1.el7.x86_64.rpm
CentOS7x86_64kernel-tools< 3.10.0-1160.83.1.el7kernel-tools-3.10.0-1160.83.1.el7.x86_64.rpm
CentOS7x86_64kernel-tools-libs< 3.10.0-1160.83.1.el7kernel-tools-libs-3.10.0-1160.83.1.el7.x86_64.rpm
Rows per page:
1-10 of 131

Related

nessus 93
redhat 23
rosalinux 1
prion 2
f5 2
oraclelinux 8
amd 1
cve 2
debiancve 3
ubuntucve 2
redhatcve 2
veracode 2
citrix 1
openvas 27
suse 14
osv 1
centos 4
amazon 3
mageia 2
debian 3
ibm 1
threatpost 2
nessus
nessus
RHEL 7 : kernel (RHSA-2023:0399)
2023-01-24 00:00:00
RHEL 7 : kernel-rt (RHSA-2023:0400)
2023-01-24 00:00:00
CentOS 7 : kernel-rt (RHSA-2023:0400)
2024-01-09 00:00:00
redhat
redhat
(RHSA-2023:0400) Important: kernel-rt security and bug fix update
2023-01-24 09:46:52
(RHSA-2023:0399) Important: kernel security and bug fix update
2023-01-24 09:46:52
(RHSA-2023:0187) Moderate: kernel security update
2023-01-17 08:48:58
rosalinux
rosalinux
Advisory ROSA-SA-2023-2097
2023-02-07 10:10:41
prion
prion
Design/Logic Flaw
2022-03-11 18:15:00
Out-of-bounds
2022-09-09 15:15:00
f5
f5
K000137188 : AMD CPU vulnerability CVE-2021-26401
2023-10-09 00:00:00
K000134670 : Linux kernel vulnerability CVE-2022-2964
2023-05-18 00:00:00
oraclelinux
oraclelinux
kernel security and bug fix update
2023-01-25 00:00:00
kernel security update
2023-10-20 00:00:00
libvirt security update
2018-01-05 00:00:00
amd
amd
LFENCE/JMP Mitigation Update for CVE-2017-5715
2022-03-08 00:00:00
cve
cve
CVE-2021-26401
2022-03-11 18:15:00
CVE-2022-2964
2022-09-09 15:15:00
debiancve
debiancve
CVE-2021-26401
2022-03-11 18:15:00
CVE-2017-5715
2018-01-04 13:29:00
CVE-2022-2964
2022-09-09 15:15:00
ubuntucve
ubuntucve
CVE-2021-26401
2022-03-11 00:00:00
CVE-2022-2964
2022-09-09 00:00:00
redhatcve
redhatcve
CVE-2021-26401
2022-03-09 10:23:54
CVE-2022-2964
2022-08-23 14:40:10
veracode
veracode
Information Disclosure
2022-06-23 22:13:13
Denial Of Service (DoS)
2023-02-03 22:17:08
citrix
citrix
Citrix Hypervisor Security Update
2022-03-07 14:55:18
openvas
openvas
openSUSE: Security Advisory for kernel-firmware (openSUSE-SU-2018:2237-1)
2018-10-26 00:00:00
Huawei EulerOS: Security Advisory for kvm (EulerOS-SA-2018-1233)
2020-01-23 00:00:00
openSUSE: Security Advisory for ucode-intel (openSUSE-SU-2018:0066-1)
2018-01-12 00:00:00
suse
suse
Security update for ucode-intel (important)
2018-01-11 15:08:06
Security update for kernel-firmware (important)
2018-01-05 18:09:20
Security update for various KMPs (important)
2018-03-20 00:07:10
osv
osv
CVE-2017-5715
2018-01-04 13:29:00
centos
centos
microcode_ctl security update
2018-01-04 19:41:20
microcode_ctl security update
2018-01-17 14:59:21
libvirt security update
2018-01-04 19:54:04
amazon
amazon
Important: microcode_ctl
2018-02-07 18:54:00
Important: qemu-kvm
2018-01-12 21:24:00
Important: linux-firmware
2018-02-20 21:46:00
mageia
mageia
Updated microcode packages fix security vulnerabilities
2018-01-13 17:28:36
Updated microcode packages fix security vulnerability
2018-05-29 22:41:14
debian
debian
[SECURITY] [DLA 2148-1] amd64-microcode security update
2020-03-20 19:56:36
[SECURITY] [DLA 1362-1] gcc-4.9-backport new package
2018-04-25 16:19:40
[SECURITY] [DLA 1349-1] linux-tools security update
2018-04-16 22:31:08
ibm
ibm
Security Bulletin: IBM has released Unified Extensible Firmware Interface (UEFI) fixes in response to the vulnerability known as Spectre (CVE-2017-5715)
2023-04-18 18:22:18
threatpost
threatpost
New Spectre-Level Flaw Targets Return Stack Buffer
2018-07-23 18:27:20
Intel Halts Spectre Fixes On Older Chips, Citing Limited Ecosystem Support
2018-04-04 15:18:47

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

4.3 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:S/C:P/I:P/A:P

0.975 High

EPSS

Percentile

100.0%

JSON
Related for CESA-2023:0399
nessus93redhat23rosalinux1prion2f52oraclelinux8amd1cve2debiancve3ubuntucve2redhatcve2veracode2citrix1openvas27suse14osv1centos4amazon3mageia2debian3ibm1threatpost2