# ALAS2023-2023-070: Security update for 19 packages

ALAS2023-2023-070, released February 17, 2023, fixes 111 CVEs across 19 products. 4 of them are being exploited (CVE-2022-0847); 4 on CISA KEV. Patch Radar priority: Patch now.

- Web page: https://patchblox.com/security/fix/linux/alas2023-2023-070
- Platform: Linux
- Released: Feb 17, 2023
- Priority: Patch now (Closes CVE-2022-0847, exploited (CISA KEV))
- CVEs: 111, exploited: 4, on CISA KEV: 4
- Vendor advisory: https://alas.aws.amazon.com/AL2023/ALAS-2023-070.html

## Applies to

| Product | Release | Fixed in |
|---|---|---|
| [bpftool](https://patchblox.com/security/data/product/linux/bpftool.md) | amzn 2023 | 6.1.10-15.42.amzn2023 |
| [bpftool-debuginfo](https://patchblox.com/security/data/product/linux/bpftool-debuginfo.md) | amzn 2023 | 6.1.10-15.42.amzn2023 |
| [kernel](https://patchblox.com/security/data/product/linux/kernel.md) | amzn 2023 | 6.1.10-15.42.amzn2023 |
| [kernel-debuginfo](https://patchblox.com/security/data/product/linux/kernel-debuginfo.md) | amzn 2023 | 6.1.10-15.42.amzn2023 |
| [kernel-debuginfo-common-aarch64](https://patchblox.com/security/data/product/linux/kernel-debuginfo-common-aarch64.md) | amzn 2023 | 6.1.10-15.42.amzn2023 |
| [kernel-debuginfo-common-x86_64](https://patchblox.com/security/data/product/linux/kernel-debuginfo-common-x86-64.md) | amzn 2023 | 6.1.10-15.42.amzn2023 |
| [kernel-devel](https://patchblox.com/security/data/product/linux/kernel-devel.md) | amzn 2023 | 6.1.10-15.42.amzn2023 |
| [kernel-headers](https://patchblox.com/security/data/product/linux/kernel-headers.md) | amzn 2023 | 6.1.10-15.42.amzn2023 |
| [kernel-libbpf](https://patchblox.com/security/data/product/linux/kernel-libbpf.md) | amzn 2023 | 6.1.10-15.42.amzn2023 |
| [kernel-libbpf-devel](https://patchblox.com/security/data/product/linux/kernel-libbpf-devel.md) | amzn 2023 | 6.1.10-15.42.amzn2023 |
| [kernel-libbpf-static](https://patchblox.com/security/data/product/linux/kernel-libbpf-static.md) | amzn 2023 | 6.1.10-15.42.amzn2023 |
| [kernel-livepatch-6.1.10-15.42](https://patchblox.com/security/data/product/linux/kernel-livepatch-6.1.10-15.42.md) | amzn 2023 | 1.0-0.amzn2023 |
| [kernel-tools](https://patchblox.com/security/data/product/linux/kernel-tools.md) | amzn 2023 | 6.1.10-15.42.amzn2023 |
| [kernel-tools-debuginfo](https://patchblox.com/security/data/product/linux/kernel-tools-debuginfo.md) | amzn 2023 | 6.1.10-15.42.amzn2023 |
| [kernel-tools-devel](https://patchblox.com/security/data/product/linux/kernel-tools-devel.md) | amzn 2023 | 6.1.10-15.42.amzn2023 |
| [perf](https://patchblox.com/security/data/product/linux/perf.md) | amzn 2023 | 6.1.10-15.42.amzn2023 |
| [perf-debuginfo](https://patchblox.com/security/data/product/linux/perf-debuginfo.md) | amzn 2023 | 6.1.10-15.42.amzn2023 |
| [python3-perf](https://patchblox.com/security/data/product/linux/python3-perf.md) | amzn 2023 | 6.1.10-15.42.amzn2023 |
| [python3-perf-debuginfo](https://patchblox.com/security/data/product/linux/python3-perf-debuginfo.md) | amzn 2023 | 6.1.10-15.42.amzn2023 |

## CVEs this fix closes

| CVE | Priority | Title | CVSS | EPSS | Exploitation |
|---|---|---|---:|---:|---|
| [CVE-2022-0847](https://patchblox.com/security/data/cve/CVE-2022-0847.md) | Patch now | kernel-doc: kernel: improper initialization of the "flags" member of the new pipe_buffer | 8.8 | 0.9280 | CISA KEV |
| [CVE-2022-0185](https://patchblox.com/security/data/cve/CVE-2022-0185.md) | Patch now | bpftool: vfs: Out-of-bounds write of heap buffer in fs_context.c (Frantisek Hrbata) [2040585 2040586] | 8.4 | 0.2515 | CISA KEV |
| [CVE-2022-2586](https://patchblox.com/security/data/cve/CVE-2022-2586.md) | Patch now | bpftool: netfilter: nf_tables: do not allow RULE_ID to refer to another chain (Florian Westphal) [2116356] | 7.8 | 0.1020 | CISA KEV |
| [CVE-2022-0492](https://patchblox.com/security/data/cve/CVE-2022-0492.md) | Patch now | kernel: kernel: cgroups v1 release_agent feature may allow privilege escalation | 8.8 | 0.0553 | CISA KEV |
| [CVE-2022-36946](https://patchblox.com/security/data/cve/CVE-2022-36946.md) | High | bpftool: netfilter: nf_queue: do not allow packet truncation below transport header offset (Florian Westphal) [2116159] | 7.8 | 0.0887 |  |
| [CVE-2022-4379](https://patchblox.com/security/data/cve/CVE-2022-4379.md) | High | bpftool: NFSD: fix use-after-free in __nfs42_ssc_open() (Benjamin Coddington) [2152815 2152816] | 7.8 | 0.0689 |  |
| [CVE-2022-2588](https://patchblox.com/security/data/cve/CVE-2022-2588.md) | High | bpftool: net_sched: cls_route: remove from list when handle is 0 (Felix Maurer) [2121817 2116328] | 7.8 | 0.0587 |  |
| [CVE-2022-43945](https://patchblox.com/security/data/cve/CVE-2022-43945.md) | High | bpftool: NFSD: Protect against send buffer overflow in NFSv3 READ (Scott Mayhew) [2143172 2141774] | 7.8 | 0.0546 |  |
| [CVE-2022-34918](https://patchblox.com/security/data/cve/CVE-2022-34918.md) | High | kernel-uek-debug-modules-extra: ELSA-2022-9827: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.8 | 0.0545 |  |
| [CVE-2022-0742](https://patchblox.com/security/data/cve/CVE-2022-0742.md) | High | linux: Memory leak in icmp6 implementation in Linux Kernel 5.13+ allows a remote attacker to DoS a host by making it go out-... | 7.5 | 0.0504 |  |
| [CVE-2022-29901](https://patchblox.com/security/data/cve/CVE-2022-29901.md) | High | bpftool: x86: Disable RET on kexec (Konrad Rzeszutek Wilk) [Orabug: 34335631] {CVE-2022-23816} | 7.8 | 0.0501 |  |
| [CVE-2022-29900](https://patchblox.com/security/data/cve/CVE-2022-29900.md) | High | AMD: CVE-2022-29900 AMD CPU Branch Type Confusion | 7.8 | 0.0394 |  |
| [CVE-2022-32250](https://patchblox.com/security/data/cve/CVE-2022-32250.md) | High | kernel-cross-headers: netfilter: nf_tables: disallow non-stateful expression in sets earlier (Phil Sutter) [2092986 2092987] | 7.8 | 0.0291 |  |
| [CVE-2022-25636](https://patchblox.com/security/data/cve/CVE-2022-25636.md) | High | kernel-uek: netfilter: nf_tables_offload: incorrect flow offload action array size (Pablo Neira Ayuso) [Orabug: 33900416] | 7.8 | 0.0263 |  |
| [CVE-2022-1199](https://patchblox.com/security/data/cve/CVE-2022-1199.md) | High | linux: A flaw was found in the Linux kernel | 7.5 | 0.0217 |  |
| [CVE-2022-27223](https://patchblox.com/security/data/cve/CVE-2022-27223.md) | High | linux: In drivers/usb/gadget/udc/udc-xilinx.c in the Linux kernel before 5.16.12, the endpoint index is not validated and mi... | 8.8 | 0.0213 |  |
| [CVE-2022-23222](https://patchblox.com/security/data/cve/CVE-2022-23222.md) | High | kernel-zfcpdump-devel: RHSA-2024:3138: kernel security, bug fix, and enhancement update (Moderate) | 8.0 | 0.0203 |  |
| [CVE-2023-0179](https://patchblox.com/security/data/cve/CVE-2023-0179.md) | High | bpftool: netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits (Pablo Neira Ayuso) [Orabug: 34978152] | 7.8 | 0.0194 |  |
| [CVE-2022-2602](https://patchblox.com/security/data/cve/CVE-2022-2602.md) | High | kernel-uek: io_uring/af_unix: defer registered files gc to io_uring release (Pavel Begunkov) [Orabug: 34743499] | 7.0 | 0.0143 |  |
| [CVE-2022-2585](https://patchblox.com/security/data/cve/CVE-2022-2585.md) | High | kernel-uek-debug-modules-extra: posix-cpu-timers: Cleanup CPU timers before freeing them during exec (Thadeu Lima de Souza Cascardo) [Orabug: 34495548] | 7.8 | 0.0128 |  |
| [CVE-2022-3623](https://patchblox.com/security/data/cve/CVE-2022-3623.md) | High | kernel-debug-modules-core: denial of service in follow_page_pte in mm/gup.c due to poisoned pte entry | 7.5 | 0.0110 |  |
| [CVE-2022-2078](https://patchblox.com/security/data/cve/CVE-2022-2078.md) | High | bpftool: ELSA-2022-7683: kernel security, bug fix, and enhancement update (MODERATE) | 7.8 | 0.0105 |  |
| [CVE-2022-32981](https://patchblox.com/security/data/cve/CVE-2022-32981.md) | High | linux: An issue was discovered in the Linux kernel through 5.18.3 on powerpc 32-bit platforms | 7.8 | 0.0097 |  |
| [CVE-2022-3534](https://patchblox.com/security/data/cve/CVE-2022-3534.md) | High | libbpf: A vulnerability has been found in Linux Kernel up to 5.10.162/5.15.85/6.0.15/6.1.1 | 8.0 | 0.0096 |  |
| [CVE-2022-29581](https://patchblox.com/security/data/cve/CVE-2022-29581.md) | High | bpftool: ELSA-2022-7683: kernel security, bug fix, and enhancement update (MODERATE) | 7.8 | 0.0093 |  |
| [CVE-2022-36123](https://patchblox.com/security/data/cve/CVE-2022-36123.md) | High | linux: The Linux kernel before 5.18.13 lacks a certain clear operation for the block starting symbol (.bss) | 7.8 | 0.0089 |  |
| [CVE-2022-1679](https://patchblox.com/security/data/cve/CVE-2022-1679.md) | High | kernel-tools-libs-devel: use-after-free in ath9k_htc_probe_device() could cause an escalation of privileges | 7.8 | 0.0081 |  |
| [CVE-2022-30594](https://patchblox.com/security/data/cve/CVE-2022-30594.md) | High | bpftool: ELSA-2023-2951: kernel security, bug fix, and enhancement update (IMPORTANT) | 7.8 | 0.0080 |  |
| [CVE-2022-23825](https://patchblox.com/security/data/cve/CVE-2022-23825.md) | High | AMD: CVE-2022-23825 AMD CPU Branch Type Confusion | 7.8 | 0.0079 |  |
| [CVE-2022-29582](https://patchblox.com/security/data/cve/CVE-2022-29582.md) | High | bpftool: io_uring: fix race between timeout flush and removal (Jens Axboe) [Orabug: 34115159] | 7.0 | 0.0077 |  |
| [CVE-2022-3566](https://patchblox.com/security/data/cve/CVE-2022-3566.md) | High | linux: A vulnerability was identified in Linux Kernel up to 4.19.316/5.4.278/5.10.220/5.15.161 | 7.1 | 0.0074 |  |
| [CVE-2023-0461](https://patchblox.com/security/data/cve/CVE-2023-0461.md) | High | bpftool: net/ulp: use-after-free in listening ULP sockets | 7.8 | 0.0065 |  |
| [CVE-2022-0001](https://patchblox.com/security/data/cve/CVE-2022-0001.md) | High | Intel: CVE-2022-0001 Branch History Injection | 8.2 | 0.0051 |  |
| [CVE-2022-1055](https://patchblox.com/security/data/cve/CVE-2022-1055.md) | High | bpftool: ELSA-2022-7683: kernel security, bug fix, and enhancement update (MODERATE) | 7.8 | 0.0050 |  |
| [CVE-2022-23960](https://patchblox.com/security/data/cve/CVE-2022-23960.md) | High | Arm: CVE-2022-23960 Cache Speculation Restriction Vulnerability | 7.8 | 0.0050 | Disclosed |
| [CVE-2022-0854](https://patchblox.com/security/data/cve/CVE-2022-0854.md) | High | bpftool: ELSA-2022-7683: kernel security, bug fix, and enhancement update (MODERATE) | 7.8 | 0.0046 |  |
| [CVE-2022-0002](https://patchblox.com/security/data/cve/CVE-2022-0002.md) | High | bpftool: x86/speculation: Check CPU capability before applying IBRS spectre v2 mitigation (Waiman Long) [2062156 2062166] {CVE... | 8.2 | 0.0045 |  |
| [CVE-2022-4378](https://patchblox.com/security/data/cve/CVE-2022-4378.md) | High | bpftool: proc: proc_skip_spaces() shouldn't think it is working on C strings (Linus Torvalds) [Orabug: 34882775] | 7.8 | 0.0044 |  |
| [CVE-2022-1016](https://patchblox.com/security/data/cve/CVE-2022-1016.md) | High | bpftool: ELSA-2022-7683: kernel security, bug fix, and enhancement update (MODERATE) | 7.8 | 0.0044 |  |
| [CVE-2023-3111](https://patchblox.com/security/data/cve/CVE-2023-3111.md) | High | linux: A use after free vulnerability was found in prepare_to_relocate in fs/btrfs/relocation.c in btrfs in the Linux Kernel | 7.8 | 0.0044 |  |
| [CVE-2022-0494](https://patchblox.com/security/data/cve/CVE-2022-0494.md) | High | python3-perf: Information leak in scsi_ioctl() | 7.8 | 0.0042 |  |
| [CVE-2022-24958](https://patchblox.com/security/data/cve/CVE-2022-24958.md) | High | linux: drivers/usb/gadget/legacy/inode.c in the Linux kernel through 5.16.8 mishandles dev->buf release. | 7.8 | 0.0041 |  |
| [CVE-2022-28893](https://patchblox.com/security/data/cve/CVE-2022-28893.md) | High | bpftool: ELSA-2022-7683: kernel security, bug fix, and enhancement update (MODERATE) | 7.8 | 0.0041 |  |
| [CVE-2022-1158](https://patchblox.com/security/data/cve/CVE-2022-1158.md) | High | perf: RHSA-2022:8267: kernel security, bug fix, and enhancement update (Moderate) | 7.8 | 0.0041 |  |
| [CVE-2022-1353](https://patchblox.com/security/data/cve/CVE-2022-1353.md) | High | kernel-tools-libs-devel: kernel info leak issue in pfkey_register | 7.8 | 0.0040 |  |
| [CVE-2023-26544](https://patchblox.com/security/data/cve/CVE-2023-26544.md) | High | linux: In the Linux kernel 6.0.8, there is a use-after-free in run_unpack in fs/ntfs3/run.c, related to a difference between... | 7.8 | 0.0039 |  |
| [CVE-2022-29156](https://patchblox.com/security/data/cve/CVE-2022-29156.md) | High | linux: drivers/infiniband/ulp/rtrs/rtrs-clt.c in the Linux kernel before 5.16.12 has a double free related to rtrs_clt_dev_r... | 7.8 | 0.0038 |  |
| [CVE-2022-26373](https://patchblox.com/security/data/cve/CVE-2022-26373.md) | High | bpftool: x86/speculation: Add LFENCE to RSB fill sequence (Waiman Long) [2115080] | 7.8 | 0.0037 |  |
| [CVE-2022-33743](https://patchblox.com/security/data/cve/CVE-2022-33743.md) | High | bpftool: ELSA-2023-2458: kernel security, bug fix, and enhancement update (IMPORTANT) | 7.8 | 0.0036 |  |
| [CVE-2022-0500](https://patchblox.com/security/data/cve/CVE-2022-0500.md) | High | bpftool: ELSA-2024-3138: kernel security, bug fix, and enhancement update (MODERATE) | 8.0 | 0.0036 |  |
| [CVE-2022-39189](https://patchblox.com/security/data/cve/CVE-2022-39189.md) | High | bpftool: ELSA-2023-2951: kernel security, bug fix, and enhancement update (IMPORTANT) | 7.8 | 0.0034 |  |
| [CVE-2022-33742](https://patchblox.com/security/data/cve/CVE-2022-33742.md) | High | linux: Linux disk/nic frontends data leaks T[his CNA information record relates to multiple CVEs; the text explains which as... | 7.1 | 0.0034 |  |
| [CVE-2022-26365](https://patchblox.com/security/data/cve/CVE-2022-26365.md) | High | linux: Linux disk/nic frontends data leaks T[his CNA information record relates to multiple CVEs; the text explains which as... | 7.1 | 0.0033 |  |
| [CVE-2022-33740](https://patchblox.com/security/data/cve/CVE-2022-33740.md) | High | linux: Linux disk/nic frontends data leaks T[his CNA information record relates to multiple CVEs; the text explains which as... | 7.1 | 0.0033 |  |
| [CVE-2022-33741](https://patchblox.com/security/data/cve/CVE-2022-33741.md) | High | linux: Linux disk/nic frontends data leaks T[his CNA information record relates to multiple CVEs; the text explains which as... | 7.1 | 0.0033 |  |
| [CVE-2022-1852](https://patchblox.com/security/data/cve/CVE-2022-1852.md) | High | kernel-zfcpdump-core: NULL pointer dereference in x86_emulate_insn may lead to DoS | 7.8 | 0.0033 |  |
| [CVE-2022-1729](https://patchblox.com/security/data/cve/CVE-2022-1729.md) | High | bpftool: perf: Fix sys_perf_event_open() race against self (Michael Petlan) [2087948 2087949] | 7.4 | 0.0033 |  |
| [CVE-2022-3176](https://patchblox.com/security/data/cve/CVE-2022-3176.md) | High | linux: There exists a use-after-free in io_uring in the Linux kernel | 7.8 | 0.0030 |  |
| [CVE-2021-26401](https://patchblox.com/security/data/cve/CVE-2021-26401.md) | High | kernel-debug: x86/speculation: Check CPU capability before applying IBRS spectre v2 mitigation (Waiman Long) [2062156 2062166] {CVE... | 8.2 | 0.0029 |  |
| [CVE-2022-1184](https://patchblox.com/security/data/cve/CVE-2022-1184.md) | High | kernel-tools-libs-devel: use-after-free and memory errors in ext4 when mounting and operating on a corrupted image | 7.8 | 0.0029 |  |
| [CVE-2022-1973](https://patchblox.com/security/data/cve/CVE-2022-1973.md) | High | linux: A use-after-free flaw was found in the Linux kernel in log_replay in fs/ntfs3/fslog.c in the NTFS journal | 7.1 | 0.0029 |  |
| [CVE-2022-4139](https://patchblox.com/security/data/cve/CVE-2022-4139.md) | High | bpftool: drm/i915: fix TLB invalidation for Gen12 video and compute engines (Wander Lairson Costa) [2148149 2148150] | 7.8 | 0.0027 |  |
| [CVE-2022-45869](https://patchblox.com/security/data/cve/CVE-2022-45869.md) | High | kernel-debug: kernel: KVM: multiple vulnerabilities , CVE-2023-4155, CVE-2023-30456) | 7.8 | 0.0026 |  |
| [CVE-2024-0562](https://patchblox.com/security/data/cve/CVE-2024-0562.md) | High | linux: A use-after-free flaw was found in the Linux Kernel | 7.8 | 0.0025 |  |
| [CVE-2023-4387](https://patchblox.com/security/data/cve/CVE-2023-4387.md) | High | linux: A use-after-free flaw was found in vmxnet3_rq_alloc_rx_buf in drivers/net/vmxnet3/vmxnet3_drv.c in VMware's vmxnet3 e... | 7.1 | 0.0024 |  |
| [CVE-2022-3028](https://patchblox.com/security/data/cve/CVE-2022-3028.md) | High | bpftool: af_key: Do not call xfrm_probe_algs in parallel (Herbert Xu) [Orabug: 34566751] | 7.0 | 0.0023 |  |
| [CVE-2023-0590](https://patchblox.com/security/data/cve/CVE-2023-0590.md) | High | kernel-debug-core: kernel: use-after-free due to race condition in qdisc_graft | 7.0 | 0.0023 |  |
| [CVE-2022-48619](https://patchblox.com/security/data/cve/CVE-2022-48619.md) | High | kernel-debug-core: Input: add bounds checking to input_set_capability() (Benjamin Tissoires) [RHEL-21413] | 7.8 | 0.0021 |  |
| [CVE-2022-3522](https://patchblox.com/security/data/cve/CVE-2022-3522.md) | High | kernel-abi-stablelists: ELSA-2023-2951: kernel security, bug fix, and enhancement update (IMPORTANT) | 7.0 | n/a |  |
| [CVE-2022-1966](https://patchblox.com/security/data/cve/CVE-2022-1966.md) | High | bpftool: netfilter: nf_tables: disallow non-stateful expression in sets earlier (Phil Sutter) [2092994 2092995] | n/a | n/a |  |
| [CVE-2022-21123](https://patchblox.com/security/data/cve/CVE-2022-21123.md) | Routine | Intel: CVE-2022-21123 Shared Buffers Data Read (SBDR) | 6.1 | 0.0687 |  |
| [CVE-2022-21125](https://patchblox.com/security/data/cve/CVE-2022-21125.md) | Routine | Intel: CVE-2022-21125 Shared Buffers Data Sampling (SBDS) | 6.1 | 0.0645 |  |
| [CVE-2022-21166](https://patchblox.com/security/data/cve/CVE-2022-21166.md) | Routine | Intel: CVE-2022-21166 Device Register Partial Write (DRPW) | 6.1 | 0.0645 |  |
| [CVE-2022-3435](https://patchblox.com/security/data/cve/CVE-2022-3435.md) | Routine | bpftool: ELSA-2023-2458: kernel security, bug fix, and enhancement update (IMPORTANT) | 5.5 | 0.0518 |  |
| [CVE-2022-2663](https://patchblox.com/security/data/cve/CVE-2022-2663.md) | Routine | bpftool: ELSA-2023-2951: kernel security, bug fix, and enhancement update (IMPORTANT) | 5.3 | 0.0407 |  |
| [CVE-2022-1015](https://patchblox.com/security/data/cve/CVE-2022-1015.md) | Routine | bpftool: netfilter: nf_tables: validate registers coming from userspace | 6.6 | 0.0149 |  |
| [CVE-2022-3523](https://patchblox.com/security/data/cve/CVE-2022-3523.md) | Routine | kernel-debug-uki-virt: Kernel: race when faulting a device private page in memory manager | 5.3 | 0.0114 |  |
| [CVE-2022-3524](https://patchblox.com/security/data/cve/CVE-2022-3524.md) | Routine | kernel-debug-uki-virt: memory leak in ipv6_renew_options() | 5.5 | 0.0109 |  |
| [CVE-2023-0394](https://patchblox.com/security/data/cve/CVE-2023-0394.md) | Routine | bpftool: NULL pointer dereference in rawv6_push_pending_frames | 6.5 | 0.0104 |  |
| [CVE-2023-0459](https://patchblox.com/security/data/cve/CVE-2023-0459.md) | Routine | linux: Copy_from_user on 64-bit versions of the Linux kernel does not implement the __uaccess_begin_nospec allowing a user t... | 6.7 | 0.0064 |  |
| [CVE-2022-39842](https://patchblox.com/security/data/cve/CVE-2022-39842.md) | Routine | linux: An issue was discovered in the Linux kernel before 5.19 | 6.1 | 0.0060 |  |
| [CVE-2022-3643](https://patchblox.com/security/data/cve/CVE-2022-3643.md) | Routine | linux: Guests can trigger NIC interface reset/abort/crash via netback It is possible for a guest to trigger a NIC interface... | 6.5 | 0.0049 |  |
| [CVE-2022-1263](https://patchblox.com/security/data/cve/CVE-2022-1263.md) | Routine | kernel-zfcpdump: RHSA-2022:8267: kernel security, bug fix, and enhancement update (Moderate) | 5.5 | 0.0044 |  |
| [CVE-2022-2905](https://patchblox.com/security/data/cve/CVE-2022-2905.md) | Routine | linux: An out-of-bounds memory read flaw was found in the Linux kernel's BPF subsystem in how a user calls the bpf_tail_call... | 5.5 | 0.0037 |  |
| [CVE-2022-43750](https://patchblox.com/security/data/cve/CVE-2022-43750.md) | Routine | bpftool: ELSA-2023-2951: kernel security, bug fix, and enhancement update (IMPORTANT) | 6.7 | 0.0036 |  |
| [CVE-2022-3606](https://patchblox.com/security/data/cve/CVE-2022-3606.md) | Routine | libbpf1: A vulnerability was found in Linux Kernel | 5.5 | 0.0035 |  |
| [CVE-2023-2019](https://patchblox.com/security/data/cve/CVE-2023-2019.md) | Routine | linux: A flaw was found in the Linux kernel's netdevsim device driver, within the scheduling of events | 4.4 | 0.0034 |  |
| [CVE-2022-1462](https://patchblox.com/security/data/cve/CVE-2022-1462.md) | Routine | kernel-rt-debug-modules-core: possible race condition in drivers/tty/tty_buffers.c | 6.3 | 0.0034 |  |
| [CVE-2022-34495](https://patchblox.com/security/data/cve/CVE-2022-34495.md) | Routine | linux: rpmsg_probe in drivers/rpmsg/virtio_rpmsg_bus.c in the Linux kernel before 5.18.4 has a double free. | 5.5 | 0.0034 |  |
| [CVE-2022-1789](https://patchblox.com/security/data/cve/CVE-2022-1789.md) | Routine | kernel-rt-modules: KVM: NULL pointer dereference in kvm_mmu_invpcid_gva | 6.8 | 0.0034 |  |
| [CVE-2022-39190](https://patchblox.com/security/data/cve/CVE-2022-39190.md) | Routine | bpftool: ELSA-2022-8267: kernel security, bug fix, and enhancement update (MODERATE) | 5.5 | 0.0033 |  |
| [CVE-2023-0469](https://patchblox.com/security/data/cve/CVE-2023-0469.md) | Routine | bpftool: A use-after-free flaw was found in io_uring/filetable.c in io_install_fixed_file in the io_uring subcomponent in the... | 5.5 | 0.0032 |  |
| [CVE-2021-26341](https://patchblox.com/security/data/cve/CVE-2021-26341.md) | Routine | kernel-zfcpdump-modules-extra: hw: cpu: AMD CPUs may transiently execute beyond unconditional direct branch | 6.5 | 0.0032 |  |
| [CVE-2022-3567](https://patchblox.com/security/data/cve/CVE-2022-3567.md) | Routine | bpftool: ELSA-2023-2951: kernel security, bug fix, and enhancement update (IMPORTANT) | 6.4 | 0.0032 |  |
| [CVE-2022-36879](https://patchblox.com/security/data/cve/CVE-2022-36879.md) | Routine | linux: An issue was discovered in the Linux kernel through 5.18.14 | 5.5 | 0.0032 |  |
| [CVE-2022-3303](https://patchblox.com/security/data/cve/CVE-2022-3303.md) | Routine | linux: A race condition flaw was found in the Linux kernel sound subsystem due to improper locking | 4.7 | 0.0032 |  |
| [CVE-2022-0171](https://patchblox.com/security/data/cve/CVE-2022-0171.md) | Routine | linux: A flaw was found in the Linux kernel | 5.5 | 0.0030 |  |
| [CVE-2022-34494](https://patchblox.com/security/data/cve/CVE-2022-34494.md) | Routine | linux: rpmsg_virtio_add_ctrl_dev in drivers/rpmsg/virtio_rpmsg_bus.c in the Linux kernel before 5.18.4 has a double free. | 5.5 | 0.0029 |  |
| [CVE-2022-3061](https://patchblox.com/security/data/cve/CVE-2022-3061.md) | Routine | linux: Found Linux Kernel flaw in the i740 driver | 5.5 | 0.0029 |  |
| [CVE-2022-3543](https://patchblox.com/security/data/cve/CVE-2022-3543.md) | Routine | linux: A vulnerability, which was classified as problematic, has been found in Linux Kernel | 5.5 | 0.0028 |  |
| [CVE-2023-4459](https://patchblox.com/security/data/cve/CVE-2023-4459.md) | Routine | linux: A NULL pointer dereference flaw was found in vmxnet3_rq_cleanup in drivers/net/vmxnet3/vmxnet3_drv.c in the networkin... | 5.5 | 0.0025 |  |
| [CVE-2022-39188](https://patchblox.com/security/data/cve/CVE-2022-39188.md) | Routine | bpftool: ELSA-2023-2951: kernel security, bug fix, and enhancement update (IMPORTANT) | 4.7 | 0.0025 |  |
| [CVE-2022-42328](https://patchblox.com/security/data/cve/CVE-2022-42328.md) | Routine | linux: Guests can trigger deadlock in Linux netback driver T[his CNA information record relates to multiple CVEs; the text e... | 5.5 | 0.0022 |  |
| [CVE-2022-42329](https://patchblox.com/security/data/cve/CVE-2022-42329.md) | Routine | linux: Guests can trigger deadlock in Linux netback driver T[his CNA information record relates to multiple CVEs; the text e... | 5.5 | 0.0022 |  |
| [CVE-2023-1637](https://patchblox.com/security/data/cve/CVE-2023-1637.md) | Routine | bpftool: x86/tsx: Add a feature bit for TSX control MSR support | 5.5 | 0.0022 |  |
| [CVE-2022-40307](https://patchblox.com/security/data/cve/CVE-2022-40307.md) | Routine | linux: An issue was discovered in the Linux kernel through 5.19.8 | 4.7 | 0.0021 |  |
| [CVE-2023-2177](https://patchblox.com/security/data/cve/CVE-2023-2177.md) | Routine | kernel-devel: RHSA-2023:2951: kernel security, bug fix, and enhancement update (Important) | 5.5 | 0.0021 |  |
| [CVE-2022-4842](https://patchblox.com/security/data/cve/CVE-2022-4842.md) | Routine | linux: A flaw NULL Pointer Dereference in the Linux kernel NTFS3 driver function attr_punch_hole() was found | 5.5 | 0.0020 |  |
| [CVE-2022-21505](https://patchblox.com/security/data/cve/CVE-2022-21505.md) | Routine | bpftool: lockdown: Fix kexec lockdown bypass with ima policy (Eric Snowberg) [Orabug: 34386636] | 6.7 | 0.0020 |  |
| [CVE-2023-3357](https://patchblox.com/security/data/cve/CVE-2023-3357.md) | Routine | linux: A NULL pointer dereference flaw was found in the Linux kernel AMD Sensor Fusion Hub driver | 5.5 | 0.0020 |  |
| [CVE-2022-28693](https://patchblox.com/security/data/cve/CVE-2022-28693.md) | Routine | kernel-debug-devel: RHSA-2022:8267: kernel security, bug fix, and enhancement update (Moderate) | 4.7 | 0.0017 |  |

---

Data as of 2026-11-11T07:45:43Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.