# CVE-2020-10768: bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system.  Security Fix(es):  * kernel: u...

CVE-2020-10768 is fixed in 48 products on 1 platform, first by RHSA-2020:3010, released July 21, 2020. It is not reported as exploited. Patch Radar priority: Routine.

- Web page: https://patchblox.com/security/cve/CVE-2020-10768
- Priority: Routine
- CVSS: 5.5 (Important)
- EPSS: 0.0040
- CISA KEV: not listed
- Exploited (vendor report): no
- Publicly disclosed: no
- Published: Jul 21, 2020

## Description

The kernel packages contain the Linux kernel, the core of any Linux operating system.  Security Fix(es):  * kernel: use-after-free in sound/core/timer.c (CVE-2019-19807)  * kernel: kernel: DAX hugepages not considered during mremap (CVE-2020-10757)  * kernel: Rogue cross-process SSBD shutdown. Linux scheduler logical bug allows an attacker to turn off the SSBD protection. (CVE-2020-10766)  * kernel: Indirect Branch Prediction Barrier is force-disabled when STIBP is unavailable or enhanced IBRS is available. (CVE-2020-10767)  * kernel: Indirect branch speculation can be enabled after it was force-disabled by the PR_SPEC_FORCE_DISABLE prctl command. (CVE-2020-10768)  * kernel: buffer overflow in mwifiex_cmd_append_vsie_tlv function in drivers/net/wireless/marvell/mwifiex/scan.c (CVE-2020-12653)  * kernel: heap-based buffer overflow in mwifiex_ret_wmm_get_status function in drivers/net/wireless/marvell/mwifiex/wmm.c (CVE-2020-12654)  * Kernel: vfio: access to disabled MMIO space of some devices may lead to DoS scenario (CVE-2020-12888)  * kernel: kvm: Information leak within a KVM guest (CVE-2019-3016)  For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.  Bug Fix(es):  * [FJ8.2 Bug]: kernel: retrieving process core dump of the init process (PID 1) fails (BZ#1821378)  * [FJ8.0 Bug]: System hungs up after setting parameters for hugepages (BZ#1835789)  * RHEL8.2 Alpha - ISST-LTE:PowerVM: vNIC DLPAR crashes the LPAR (ibmvnic) (BZ#1836229)  * "[sig-network] Services should be rejected when no endpoints exist" test fails frequently on RHEL8 nodes (BZ#1836302)  * RHEL8.2 Beta - RHEL8.2 reports EEH errors on internal SAS adapter during HTX run on PMEM (SCM/pmem) (BZ#1842406)  * RHEL8.1 - s390/cio: fix virtio-ccw DMA without PV (BZ#1842620)  * deadlock between modprobe and netns exit (BZ#1845164)  * exit_boot failed when install RHEL8.1 (BZ#1846180)  * http request is taking more time for endpoint running on different host via nodeport service (BZ#1847128)  * RHEL8.1 - zEDC problems on z14 (genwqe/pci) (BZ#1847453)  * WARNING: CPU: 1 PID: 0 at arch/x86/kernel/apic/vector.c:846 free_moved_vector+0x141/0x150 (BZ#1848545)  * Backport conntrack race condition fixes (BZ#1851003)  * nf_conntrack module unload fail and refcount become to negative (BZ#1851005)  * OVS: backport performance patches from upstream to 8.2z (BZ#1851235)  * RHEL8.3: backport "smp: Allow smp_call_function_single_async() to insert locked csd" (BZ#1851406)  * [DELL EMC 8.2 BUG] NVMe drive is not detected after multiple hotplug (hot add + surprise remove) operations (BZ#1852045)  Enhancement(s):  * [Mellanox 8.3 FEAT] mlx5: drivers update upto Linux v5.5 (BZ#1843544)  * [IBM 8.3 FEAT] Update nvme driver to latest level for POWER (BZ#1846405)

## Where it's fixed

| Platform | Product | Fixed in | Fix | Released |
|---|---|---|---|---|
| Linux | bpftool RHEL 8 | 0:4.18.0-193.13.2.el8_2 | [RHSA-2020:3010](https://patchblox.com/security/data/fix/linux/rhsa-2020-3010.md) | Jul 21, 2020 |
| Linux | bpftool ol 8 | 0:4.18.0-193.13.2.el8_2 | [ELSA-2020-3010](https://patchblox.com/security/data/fix/linux/elsa-2020-3010.md) | Jul 24, 2020 |
| Linux | kernel RHEL 8 | 0:4.18.0-193.13.2.el8_2 | [RHSA-2020:3010](https://patchblox.com/security/data/fix/linux/rhsa-2020-3010.md) | Jul 21, 2020 |
| Linux | kernel ol 8 | 0:4.18.0-193.13.2.el8_2 | [ELSA-2020-3010](https://patchblox.com/security/data/fix/linux/elsa-2020-3010.md) | Jul 24, 2020 |
| Linux | kernel-abi-whitelists RHEL 8 | 0:4.18.0-193.13.2.el8_2 | [RHSA-2020:3010](https://patchblox.com/security/data/fix/linux/rhsa-2020-3010.md) | Jul 21, 2020 |
| Linux | kernel-abi-whitelists ol 8 | 0:4.18.0-193.13.2.el8_2 | [ELSA-2020-3010](https://patchblox.com/security/data/fix/linux/elsa-2020-3010.md) | Jul 24, 2020 |
| Linux | kernel-core RHEL 8 | 0:4.18.0-193.13.2.el8_2 | [RHSA-2020:3010](https://patchblox.com/security/data/fix/linux/rhsa-2020-3010.md) | Jul 21, 2020 |
| Linux | kernel-core ol 8 | 0:4.18.0-193.13.2.el8_2 | [ELSA-2020-3010](https://patchblox.com/security/data/fix/linux/elsa-2020-3010.md) | Jul 24, 2020 |
| Linux | kernel-cross-headers ol 8 | 0:4.18.0-193.13.2.el8_2 | [ELSA-2020-3010](https://patchblox.com/security/data/fix/linux/elsa-2020-3010.md) | Jul 24, 2020 |
| Linux | kernel-debug RHEL 8 | 0:4.18.0-193.13.2.el8_2 | [RHSA-2020:3010](https://patchblox.com/security/data/fix/linux/rhsa-2020-3010.md) | Jul 21, 2020 |
| Linux | kernel-debug ol 8 | 0:4.18.0-193.13.2.el8_2 | [ELSA-2020-3010](https://patchblox.com/security/data/fix/linux/elsa-2020-3010.md) | Jul 24, 2020 |
| Linux | kernel-debug-core RHEL 8 | 0:4.18.0-193.13.2.el8_2 | [RHSA-2020:3010](https://patchblox.com/security/data/fix/linux/rhsa-2020-3010.md) | Jul 21, 2020 |
| Linux | kernel-debug-core ol 8 | 0:4.18.0-193.13.2.el8_2 | [ELSA-2020-3010](https://patchblox.com/security/data/fix/linux/elsa-2020-3010.md) | Jul 24, 2020 |
| Linux | kernel-debug-devel RHEL 8 | 0:4.18.0-193.13.2.el8_2 | [RHSA-2020:3010](https://patchblox.com/security/data/fix/linux/rhsa-2020-3010.md) | Jul 21, 2020 |
| Linux | kernel-debug-devel ol 8 | 0:4.18.0-193.13.2.el8_2 | [ELSA-2020-3010](https://patchblox.com/security/data/fix/linux/elsa-2020-3010.md) | Jul 24, 2020 |
| Linux | kernel-debug-modules RHEL 8 | 0:4.18.0-193.13.2.el8_2 | [RHSA-2020:3010](https://patchblox.com/security/data/fix/linux/rhsa-2020-3010.md) | Jul 21, 2020 |
| Linux | kernel-debug-modules ol 8 | 0:4.18.0-193.13.2.el8_2 | [ELSA-2020-3010](https://patchblox.com/security/data/fix/linux/elsa-2020-3010.md) | Jul 24, 2020 |
| Linux | kernel-debug-modules-extra RHEL 8 | 0:4.18.0-193.13.2.el8_2 | [RHSA-2020:3010](https://patchblox.com/security/data/fix/linux/rhsa-2020-3010.md) | Jul 21, 2020 |
| Linux | kernel-debug-modules-extra ol 8 | 0:4.18.0-193.13.2.el8_2 | [ELSA-2020-3010](https://patchblox.com/security/data/fix/linux/elsa-2020-3010.md) | Jul 24, 2020 |
| Linux | kernel-devel RHEL 8 | 0:4.18.0-193.13.2.el8_2 | [RHSA-2020:3010](https://patchblox.com/security/data/fix/linux/rhsa-2020-3010.md) | Jul 21, 2020 |
| Linux | kernel-devel ol 8 | 0:4.18.0-193.13.2.el8_2 | [ELSA-2020-3010](https://patchblox.com/security/data/fix/linux/elsa-2020-3010.md) | Jul 24, 2020 |
| Linux | kernel-doc RHEL 8 | 0:4.18.0-193.13.2.el8_2 | [RHSA-2020:3010](https://patchblox.com/security/data/fix/linux/rhsa-2020-3010.md) | Jul 21, 2020 |
| Linux | kernel-doc ol 8 | 0:4.18.0-193.13.2.el8_2 | [ELSA-2020-3010](https://patchblox.com/security/data/fix/linux/elsa-2020-3010.md) | Jul 24, 2020 |
| Linux | kernel-headers ol 8 | 0:4.18.0-193.13.2.el8_2 | [ELSA-2020-3010](https://patchblox.com/security/data/fix/linux/elsa-2020-3010.md) | Jul 24, 2020 |
| Linux | kernel-modules RHEL 8 | 0:4.18.0-193.13.2.el8_2 | [RHSA-2020:3010](https://patchblox.com/security/data/fix/linux/rhsa-2020-3010.md) | Jul 21, 2020 |
| Linux | kernel-modules ol 8 | 0:4.18.0-193.13.2.el8_2 | [ELSA-2020-3010](https://patchblox.com/security/data/fix/linux/elsa-2020-3010.md) | Jul 24, 2020 |
| Linux | kernel-modules-extra RHEL 8 | 0:4.18.0-193.13.2.el8_2 | [RHSA-2020:3010](https://patchblox.com/security/data/fix/linux/rhsa-2020-3010.md) | Jul 21, 2020 |
| Linux | kernel-modules-extra ol 8 | 0:4.18.0-193.13.2.el8_2 | [ELSA-2020-3010](https://patchblox.com/security/data/fix/linux/elsa-2020-3010.md) | Jul 24, 2020 |
| Linux | kernel-rt RHEL 8 | 0:4.18.0-193.13.2.rt13.65.el8_2 | [RHSA-2020:3016](https://patchblox.com/security/data/fix/linux/rhsa-2020-3016.md) | Jul 21, 2020 |
| Linux | kernel-rt-core RHEL 8 | 0:4.18.0-193.13.2.rt13.65.el8_2 | [RHSA-2020:3016](https://patchblox.com/security/data/fix/linux/rhsa-2020-3016.md) | Jul 21, 2020 |
| Linux | kernel-rt-debug RHEL 8 | 0:4.18.0-193.13.2.rt13.65.el8_2 | [RHSA-2020:3016](https://patchblox.com/security/data/fix/linux/rhsa-2020-3016.md) | Jul 21, 2020 |
| Linux | kernel-rt-debug-core RHEL 8 | 0:4.18.0-193.13.2.rt13.65.el8_2 | [RHSA-2020:3016](https://patchblox.com/security/data/fix/linux/rhsa-2020-3016.md) | Jul 21, 2020 |
| Linux | kernel-rt-debug-devel RHEL 8 | 0:4.18.0-193.13.2.rt13.65.el8_2 | [RHSA-2020:3016](https://patchblox.com/security/data/fix/linux/rhsa-2020-3016.md) | Jul 21, 2020 |
| Linux | kernel-rt-debug-kvm RHEL 8 | 0:4.18.0-193.13.2.rt13.65.el8_2 | [RHSA-2020:3016](https://patchblox.com/security/data/fix/linux/rhsa-2020-3016.md) | Jul 21, 2020 |
| Linux | kernel-rt-debug-modules RHEL 8 | 0:4.18.0-193.13.2.rt13.65.el8_2 | [RHSA-2020:3016](https://patchblox.com/security/data/fix/linux/rhsa-2020-3016.md) | Jul 21, 2020 |
| Linux | kernel-rt-debug-modules-extra RHEL 8 | 0:4.18.0-193.13.2.rt13.65.el8_2 | [RHSA-2020:3016](https://patchblox.com/security/data/fix/linux/rhsa-2020-3016.md) | Jul 21, 2020 |
| Linux | kernel-rt-devel RHEL 8 | 0:4.18.0-193.13.2.rt13.65.el8_2 | [RHSA-2020:3016](https://patchblox.com/security/data/fix/linux/rhsa-2020-3016.md) | Jul 21, 2020 |
| Linux | kernel-rt-kvm RHEL 8 | 0:4.18.0-193.13.2.rt13.65.el8_2 | [RHSA-2020:3016](https://patchblox.com/security/data/fix/linux/rhsa-2020-3016.md) | Jul 21, 2020 |
| Linux | kernel-rt-modules RHEL 8 | 0:4.18.0-193.13.2.rt13.65.el8_2 | [RHSA-2020:3016](https://patchblox.com/security/data/fix/linux/rhsa-2020-3016.md) | Jul 21, 2020 |
| Linux | kernel-rt-modules-extra RHEL 8 | 0:4.18.0-193.13.2.rt13.65.el8_2 | [RHSA-2020:3016](https://patchblox.com/security/data/fix/linux/rhsa-2020-3016.md) | Jul 21, 2020 |
| Linux | kernel-tools RHEL 8 | 0:4.18.0-193.13.2.el8_2 | [RHSA-2020:3010](https://patchblox.com/security/data/fix/linux/rhsa-2020-3010.md) | Jul 21, 2020 |
| Linux | kernel-tools ol 8 | 0:4.18.0-193.13.2.el8_2 | [ELSA-2020-3010](https://patchblox.com/security/data/fix/linux/elsa-2020-3010.md) | Jul 24, 2020 |
| Linux | kernel-tools-libs RHEL 8 | 0:4.18.0-193.13.2.el8_2 | [RHSA-2020:3010](https://patchblox.com/security/data/fix/linux/rhsa-2020-3010.md) | Jul 21, 2020 |
| Linux | kernel-tools-libs ol 8 | 0:4.18.0-193.13.2.el8_2 | [ELSA-2020-3010](https://patchblox.com/security/data/fix/linux/elsa-2020-3010.md) | Jul 24, 2020 |
| Linux | kernel-tools-libs-devel RHEL 8 | 0:4.18.0-193.13.2.el8_2 | [RHSA-2020:3010](https://patchblox.com/security/data/fix/linux/rhsa-2020-3010.md) | Jul 21, 2020 |
| Linux | kernel-tools-libs-devel ol 8 | 0:4.18.0-193.13.2.el8_2 | [ELSA-2020-3010](https://patchblox.com/security/data/fix/linux/elsa-2020-3010.md) | Jul 24, 2020 |
| Linux | kernel-uek ol 8 | 0:5.4.17-2011.5.3.el8uek | [ELSA-2020-5805](https://patchblox.com/security/data/fix/linux/elsa-2020-5805.md) | Aug 10, 2020 |
| Linux | kernel-uek-debug ol 8 | 0:5.4.17-2011.5.3.el8uek | [ELSA-2020-5805](https://patchblox.com/security/data/fix/linux/elsa-2020-5805.md) | Aug 10, 2020 |
| Linux | kernel-uek-debug-devel ol 8 | 0:5.4.17-2011.5.3.el8uek | [ELSA-2020-5805](https://patchblox.com/security/data/fix/linux/elsa-2020-5805.md) | Aug 10, 2020 |
| Linux | kernel-uek-devel ol 8 | 0:5.4.17-2011.5.3.el8uek | [ELSA-2020-5805](https://patchblox.com/security/data/fix/linux/elsa-2020-5805.md) | Aug 10, 2020 |
| Linux | kernel-uek-doc ol 8 | 0:5.4.17-2011.5.3.el8uek | [ELSA-2020-5805](https://patchblox.com/security/data/fix/linux/elsa-2020-5805.md) | Aug 10, 2020 |
| Linux | kernel-uek-tools ol 8 | 0:5.4.17-2011.5.3.el7uek | [ELSA-2020-5805](https://patchblox.com/security/data/fix/linux/elsa-2020-5805.md) | Aug 10, 2020 |
| Linux | kernel-uek-tools-libs ol 8 | 0:5.4.17-2011.5.3.el7uek | [ELSA-2020-5805](https://patchblox.com/security/data/fix/linux/elsa-2020-5805.md) | Aug 10, 2020 |
| Linux | kernel-zfcpdump RHEL 8 | 0:4.18.0-193.13.2.el8_2 | [RHSA-2020:3010](https://patchblox.com/security/data/fix/linux/rhsa-2020-3010.md) | Jul 21, 2020 |
| Linux | kernel-zfcpdump-core RHEL 8 | 0:4.18.0-193.13.2.el8_2 | [RHSA-2020:3010](https://patchblox.com/security/data/fix/linux/rhsa-2020-3010.md) | Jul 21, 2020 |
| Linux | kernel-zfcpdump-devel RHEL 8 | 0:4.18.0-193.13.2.el8_2 | [RHSA-2020:3010](https://patchblox.com/security/data/fix/linux/rhsa-2020-3010.md) | Jul 21, 2020 |
| Linux | kernel-zfcpdump-modules RHEL 8 | 0:4.18.0-193.13.2.el8_2 | [RHSA-2020:3010](https://patchblox.com/security/data/fix/linux/rhsa-2020-3010.md) | Jul 21, 2020 |
| Linux | kernel-zfcpdump-modules-extra RHEL 8 | 0:4.18.0-193.13.2.el8_2 | [RHSA-2020:3010](https://patchblox.com/security/data/fix/linux/rhsa-2020-3010.md) | Jul 21, 2020 |
| Linux | kpatch-patch-4_18_0-193 RHEL 8 | 0:1-5.el8 | [RHSA-2020:3073](https://patchblox.com/security/data/fix/linux/rhsa-2020-3073.md) | Jul 21, 2020 |
| Linux | kpatch-patch-4_18_0-193_1_2 RHEL 8 | 0:1-3.el8_2 | [RHSA-2020:3073](https://patchblox.com/security/data/fix/linux/rhsa-2020-3073.md) | Jul 21, 2020 |
| Linux | kpatch-patch-4_18_0-193_6_3 RHEL 8 | 0:1-2.el8_2 | [RHSA-2020:3073](https://patchblox.com/security/data/fix/linux/rhsa-2020-3073.md) | Jul 21, 2020 |
| Linux | perf RHEL 8 | 0:4.18.0-193.13.2.el8_2 | [RHSA-2020:3010](https://patchblox.com/security/data/fix/linux/rhsa-2020-3010.md) | Jul 21, 2020 |
| Linux | perf ol 8 | 0:4.18.0-193.13.2.el8_2 | [ELSA-2020-3010](https://patchblox.com/security/data/fix/linux/elsa-2020-3010.md) | Jul 24, 2020 |
| Linux | python-perf ol 8 | 0:5.4.17-2011.5.3.el7uek | [ELSA-2020-5805](https://patchblox.com/security/data/fix/linux/elsa-2020-5805.md) | Aug 10, 2020 |
| Linux | python3-perf RHEL 8 | 0:4.18.0-193.13.2.el8_2 | [RHSA-2020:3010](https://patchblox.com/security/data/fix/linux/rhsa-2020-3010.md) | Jul 21, 2020 |
| Linux | python3-perf ol 8 | 0:4.18.0-193.13.2.el8_2 | [ELSA-2020-3010](https://patchblox.com/security/data/fix/linux/elsa-2020-3010.md) | Jul 24, 2020 |

---

Data as of 2026-11-08T13:06:02Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.
