CVE-2022-41974

High

Advisory

Published 16 Sept 2024In the index since 8 Sept 2026

Severity: High; worst across findings
CVSS: 7.8; base score, highest
EPSS: 0.006; 48th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 6; of 17,781 indexed, latest versions
Container images: 14; deployed by those charts
Fix available: 1 of 1; affected package

Red Hat Security Advisory: device-mapper-multipath security update

Carried by container images the latest versions of 6 of 17,781 indexed charts deploy, on 14 images.

Affected package	Affected versions	Fixed in	Images
device-mapper-multipathrpm	0.4.9-123.el7, 0.4.9-127.el7, 0.4.9-131.el7, 0.4.9-133.el7+2 more	0:0.4.9-136.el7_9	14

OSV records: RHSA-2022:7186

Charts affected

6 by stars

Chart

Latest

Affected images

Radar Score

rke2-canalrke2-charts

3.13.3

2 of 2 See more

rke2-canal rke2-charts 3.13.3

2 of the 2 container images this version deploys carry CVE-2022-41974.

Container image	Digest	Package	Fixed in
rancher/hardened-calico :v3.13.3	6d2cd61a338b	device-mapper-multipath@0.4.9-131.el7	0:0.4.9-136.el7_9
rancher/hardened-flannel :v0.13.0-rancher1	42784bb38ed3	device-mapper-multipath@0.4.9-133.el7	0:0.4.9-136.el7_9

Open the chart page →

6,996

ibm-app-navigatoribm-charts

1.0.1

2 of 5 See more

ibm-app-navigator ibm-charts 1.0.1

2 of the 5 container images this version deploys carry CVE-2022-41974.

Container image	Digest	Package	Fixed in
ibmcom/app-nav-init :1.0.1	240ff499eb5b	device-mapper-multipath@0.4.9-123.el7	0:0.4.9-136.el7_9
ibmcom/app-nav-ui :1.0.1	e2a86997b36b	device-mapper-multipath@0.4.9-123.el7	0:0.4.9-136.el7_9

Open the chart page →

32,915

ibm-business-automation-insights-devibm-charts

3.2.0

6 of 6 See more

ibm-business-automation-insights-dev ibm-charts 3.2.0

6 of the 6 container images this version deploys carry CVE-2022-41974.

Container image	Digest	Package	Fixed in
ibmcom/bai-admin-dev :19.0.2	02d882f2836e	device-mapper-multipath@0.4.9-127.el7	0:0.4.9-136.el7_9
ibmcom/bai-elasticsearch-dev :19.0.2	5441dba2fa00	device-mapper-multipath@0.4.9-127.el7	0:0.4.9-136.el7_9
ibmcom/bai-flink-dev :19.0.2	e31ff09e8aad	device-mapper-multipath@0.4.9-127.el7	0:0.4.9-136.el7_9
ibmcom/bai-flink-zookeeper-dev :19.0.2	58548034cf55	device-mapper-multipath@0.4.9-127.el7	0:0.4.9-136.el7_9
ibmcom/bai-init-dev :19.0.2	b138f1eac0b1	device-mapper-multipath@0.4.9-127.el7	0:0.4.9-136.el7_9
ibmcom/bai-setup-dev :19.0.2	b8e8df11072d	device-mapper-multipath@0.4.9-127.el7	0:0.4.9-136.el7_9

Open the chart page →

39,349

ibm-voice-gateway-devibm-charts

3.1.0

1 of 2 See more

ibm-voice-gateway-dev ibm-charts 3.1.0

1 of the 2 container images this version deploys carry CVE-2022-41974.

Container image	Digest	Package	Fixed in
ibmcom/voice-gateway-mr :1.0.5.0	0762ab1df6c1	device-mapper-multipath@0.4.9-127.el7	0:0.4.9-136.el7_9

Open the chart page →

4,505

rke2-canal-1.19-1.20rke2-charts

3.13.3-build2021102202

2 of 2 See more

rke2-canal-1.19-1.20 rke2-charts 3.13.3-build2021102202

2 of the 2 container images this version deploys carry CVE-2022-41974.

Container image	Digest	Package	Fixed in
rancher/hardened-calico :v3.13.3-build20210223	c678c25d47c8	device-mapper-multipath@0.4.9-134.el7_9	0:0.4.9-136.el7_9
rancher/hardened-flannel :v0.14.1-build20211022	d6a47d394c03	device-mapper-multipath@0.4.9-135.el7_9	0:0.4.9-136.el7_9

Open the chart page →

5,942

rke2-kube-proxyrke2-charts

1.20.2

1 of 1 See more

rke2-kube-proxy rke2-charts 1.20.2

1 of the 1 container images this version deploys carry CVE-2022-41974.

Container image	Digest	Package	Fixed in
rancher/hardened-kube-proxy :v1.20.2	d0600143c23c	device-mapper-multipath@0.4.9-134.el7_9	0:0.4.9-136.el7_9

Open the chart page →

1,552

Container images carrying it

14 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
ibmcom/app-nav-init :1.0.1	240ff499eb5b	device-mapper-multipath@0.4.9-123.el7	0:0.4.9-136.el7_9	1
ibmcom/app-nav-ui :1.0.1	e2a86997b36b	device-mapper-multipath@0.4.9-123.el7	0:0.4.9-136.el7_9	1
ibmcom/bai-admin-dev :19.0.2	02d882f2836e	device-mapper-multipath@0.4.9-127.el7	0:0.4.9-136.el7_9	1
ibmcom/bai-elasticsearch-dev :19.0.2	5441dba2fa00	device-mapper-multipath@0.4.9-127.el7	0:0.4.9-136.el7_9	1
ibmcom/bai-flink-dev :19.0.2	e31ff09e8aad	device-mapper-multipath@0.4.9-127.el7	0:0.4.9-136.el7_9	1
ibmcom/bai-flink-zookeeper-dev :19.0.2	58548034cf55	device-mapper-multipath@0.4.9-127.el7	0:0.4.9-136.el7_9	1
ibmcom/bai-init-dev :19.0.2	b138f1eac0b1	device-mapper-multipath@0.4.9-127.el7	0:0.4.9-136.el7_9	1
ibmcom/bai-setup-dev :19.0.2	b8e8df11072d	device-mapper-multipath@0.4.9-127.el7	0:0.4.9-136.el7_9	1
ibmcom/voice-gateway-mr :1.0.5.0	0762ab1df6c1	device-mapper-multipath@0.4.9-127.el7	0:0.4.9-136.el7_9	1
rancher/hardened-calico :v3.13.3	6d2cd61a338b	device-mapper-multipath@0.4.9-131.el7	0:0.4.9-136.el7_9	1
rancher/hardened-calico :v3.13.3-build20210223	c678c25d47c8	device-mapper-multipath@0.4.9-134.el7_9	0:0.4.9-136.el7_9	1
rancher/hardened-flannel :v0.13.0-rancher1	42784bb38ed3	device-mapper-multipath@0.4.9-133.el7	0:0.4.9-136.el7_9	1
rancher/hardened-flannel :v0.14.1-build20211022	d6a47d394c03	device-mapper-multipath@0.4.9-135.el7_9	0:0.4.9-136.el7_9	1
rancher/hardened-kube-proxy :v1.20.2	d0600143c23c	device-mapper-multipath@0.4.9-134.el7_9	0:0.4.9-136.el7_9	1