CVE-2020-9391
kernel-uek: [5.4.17-2011.2.2uek] - scsi: qla2xxx: Move free of fcport out of interrupt context (Joe Carnuccio) [Orabug: 31225231...
CVE-2020-9391 is fixed in 9 products on 1 platform, first by ELSA-2020-5691, released May 18, 2020. It is not reported as exploited. Patch Radar priority: Routine.
Routine
CVSS
5.5
IMPORTANT
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0052
44th percentile
[5.4.17-2011.2.2uek] - scsi: qla2xxx: Move free of fcport out of interrupt context (Joe Carnuccio) [Orabug: 31225231] - xfs: move inode flush to the sync workqueue (Darrick J. Wong) [Orabug: 31132665] - arm64: Kconfig: Enable NODES_SPAN_OTHER_NODES config for NUMA (Hoan Tran) [Orabug: 31049202] - scsi: bnx2fc: timeout calculation invalid for bnx2fc_eh_abort() (Laurence Oberman) [Orabug: 31207643] - jbd2: disable CONFIG_JBD2_DEBUG (Junxiao Bi) [Orabug: 31264694] [5.4.17-2011.2.1uek] - x86/mce: Restart the system when LMCE UE error occurs (Thomas Tai) [Orabug: 31218859]
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Linux | |||
| kernel-uek · ol 8 | 0:5.4.17-2011.2.2.el8uek | ELSA-2020-5691 | May 18, 2020 |
| kernel-uek-debug · ol 8 | 0:5.4.17-2011.2.2.el8uek | ELSA-2020-5691 | May 18, 2020 |
| kernel-uek-debug-devel · ol 8 | 0:5.4.17-2011.2.2.el8uek | ELSA-2020-5691 | May 18, 2020 |
| kernel-uek-devel · ol 8 | 0:5.4.17-2011.2.2.el8uek | ELSA-2020-5691 | May 18, 2020 |
| kernel-uek-doc · ol 8 | 0:5.4.17-2011.2.2.el8uek | ELSA-2020-5691 | May 18, 2020 |
| kernel-uek-tools · ol 8 | 0:5.4.17-2011.2.2.el7uek | ELSA-2020-5691 | May 18, 2020 |
| kernel-uek-tools-libs · ol 8 | 0:5.4.17-2011.2.2.el7uek | ELSA-2020-5691 | May 18, 2020 |
| perf · ol 8 | 0:5.4.17-2011.2.2.el7uek | ELSA-2020-5691 | May 18, 2020 |
| python-perf · ol 8 | 0:5.4.17-2011.2.2.el7uek | ELSA-2020-5691 | May 18, 2020 |