{
  "cveId": "CVE-2020-11494",
  "url": "https://patchblox.com/security/cve/CVE-2020-11494",
  "summary": "CVE-2020-11494 is fixed in 9 products on 1 platform, first by ELSA-2020-5663, released April 27, 2020. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "kernel-uek: [5.4.17-2011.1.2]\n- ctf: discard CTF from the vDSO (Nick Alcock)  [Orabug: 31194036]\n\n[5.4.17-2011.1.1]\n- slcan: Don\u0027...",
  "description": "[5.4.17-2011.1.2]\n- ctf: discard CTF from the vDSO (Nick Alcock)  [Orabug: 31194036]\n\n[5.4.17-2011.1.1]\n- slcan: Don\u0027t transmit uninitialized stack data in padding (Richard Palethorpe)  [Orabug: 31136750]  {CVE-2020-11494}\n- blktrace: Protect q-\u003Eblk_trace with RCU (Jan Kara)  [Orabug: 31123573]  {CVE-2019-19768}\n- KVM: x86: clear stale x86_emulate_ctxt-\u003Eintercept value (Vitaly Kuznetsov)  [Orabug: 31118688] \n- perf/x86/amd: Add support for Large Increment per Cycle Events (Kim Phillips)  [Orabug: 31104924] \n- perf/x86/amd: Constrain Large Increment per Cycle events (Kim Phillips)  [Orabug: 31104924] \n- kvm/svm: PKU not currently supported (John Allen)  [Orabug: 31104924] \n- KVM: SVM: Override default MMIO mask if memory encryption is enabled (Tom Lendacky)  [Orabug: 31104924] \n- EDAC/amd64: Drop some family checks for newer systems (Yazen Ghannam)  [Orabug: 31104924] \n- x86/amd_nb: Add Family 19h PCI IDs (Yazen Ghannam)  [Orabug: 31104924] \n- EDAC/mce_amd: Always load on SMCA systems (Yazen Ghannam)  [Orabug: 31104924] \n- x86/MCE/AMD, EDAC/mce_amd: Add new Load Store unit McaType (Yazen Ghannam)  [Orabug: 31104924] \n- EDAC/amd64: Add family ops for Family 19h Models 00h-0Fh (Yazen Ghannam)  [Orabug: 31104924] \n- EDAC/amd64: Check for memory before fully initializing an instance (Yazen Ghannam)  [Orabug: 31104924] \n- EDAC/amd64: Use cached data when checking for ECC (Yazen Ghannam)  [Orabug: 31104924] \n- EDAC/amd64: Save max number of controllers to family type (Yazen Ghannam)  [Orabug: 31104924] \n- EDAC/amd64: Gather hardware information early (Yazen Ghannam)  [Orabug: 31104924] \n- EDAC/amd64: Make struct amd64_family_type global (Yazen Ghannam)  [Orabug: 31104924] \n- floppy: check FDC index for errors before assigning it (Linus Torvalds)  [Orabug: 31067510]  {CVE-2020-9383}\n- KVM: SVM: Guard against DEACTIVATE when performing WBINVD/DF_FLUSH (Tom Lendacky)  [Orabug: 31012269] \n- KVM: SVM: Serialize access to the SEV ASID bitmap (Tom Lendacky)  [Orabug: 31012269] \n- iommu/vt-d: Allow devices with RMRRs to use identity domain (Lu Baolu)  [Orabug: 31127400]\n\n[5.4.17-2011.1.0]\n- vhost: Check docket sk_family instead of call getname (Eugenio Perez)  [Orabug: 31085989]  {CVE-2020-10942}\n- selftests/net: add definition for SOL_DCCP to fix compilation errors for old libc (Alan Maguire)  [Orabug: 31078892] \n- kernel: cpu.c: fix print typo about SMT status (Mihai Carabas)  [Orabug: 31053334] \n- nfs: optimise readdir cache page invalidation (Dai Ngo)  [Orabug: 31044292] \n- NFS: Directory page cache pages need to be locked when read (Trond Myklebust)  [Orabug: 31044292] \n- rds: transport module should be auto loaded when transport is set (Rao Shoaib)  [Orabug: 31032126] \n- efi: Fix a race and a buffer overflow while reading efivars via sysfs (Vladis Dronov)  [Orabug: 31020408] \n- net: Support GRO/GSO fraglist chaining. (Steffen Klassert)  [Orabug: 30670829] \n- net: Add fraglist GRO/GSO feature flags (Steffen Klassert)  [Orabug: 30670829] \n- udp: Support UDP fraglist GRO/GSO. (Steffen Klassert)  [Orabug: 30670829] \n- net: remove the check argument from __skb_gro_checksum_convert (Li RongQing)  [Orabug: 30670829] \n- Revert \u0027nvme_fc: add module to ops template to allow module references\u0027 (John Donnelly)  [Orabug: 31119387] \n- ext4: add cond_resched() to ext4_protect_reserved_inode (Shijie Luo)  [Orabug: 31067112]  {CVE-2020-8992}\n- dsa: disable module unloading for ARM64 (Allen Pais)  [Orabug: 30456791] \n- bpf: Undo incorrect __reg_bound_offset32 handling (Daniel Borkmann)  [Orabug: 31127385]  {CVE-2020-8835}\n- bpf: Fix tnum constraints for 32-bit comparisons (Jann Horn)  [Orabug: 31127385]  {CVE-2020-8835}",
  "published": "2020-04-27T00:00:00Z",
  "severity": "IMPORTANT",
  "cvss": 4.4,
  "epss": 0.00722,
  "epssPercentile": 0.54162,
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "kernel-uek",
      "release": "ol 8",
      "fixedVersion": "0:5.4.17-2011.1.2.el8uek",
      "fix": "ELSA-2020-5663",
      "url": "https://patchblox.com/security/fix/linux/elsa-2020-5663",
      "released": "2020-04-27T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-debug",
      "release": "ol 8",
      "fixedVersion": "0:5.4.17-2011.1.2.el8uek",
      "fix": "ELSA-2020-5663",
      "url": "https://patchblox.com/security/fix/linux/elsa-2020-5663",
      "released": "2020-04-27T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-debug-devel",
      "release": "ol 8",
      "fixedVersion": "0:5.4.17-2011.1.2.el8uek",
      "fix": "ELSA-2020-5663",
      "url": "https://patchblox.com/security/fix/linux/elsa-2020-5663",
      "released": "2020-04-27T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-devel",
      "release": "ol 8",
      "fixedVersion": "0:5.4.17-2011.1.2.el8uek",
      "fix": "ELSA-2020-5663",
      "url": "https://patchblox.com/security/fix/linux/elsa-2020-5663",
      "released": "2020-04-27T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-doc",
      "release": "ol 8",
      "fixedVersion": "0:5.4.17-2011.1.2.el8uek",
      "fix": "ELSA-2020-5663",
      "url": "https://patchblox.com/security/fix/linux/elsa-2020-5663",
      "released": "2020-04-27T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-tools",
      "release": "ol 8",
      "fixedVersion": "0:5.4.17-2011.1.2.el7uek",
      "fix": "ELSA-2020-5663",
      "url": "https://patchblox.com/security/fix/linux/elsa-2020-5663",
      "released": "2020-04-27T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-tools-libs",
      "release": "ol 8",
      "fixedVersion": "0:5.4.17-2011.1.2.el7uek",
      "fix": "ELSA-2020-5663",
      "url": "https://patchblox.com/security/fix/linux/elsa-2020-5663",
      "released": "2020-04-27T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "perf",
      "release": "ol 8",
      "fixedVersion": "0:5.4.17-2011.1.2.el7uek",
      "fix": "ELSA-2020-5663",
      "url": "https://patchblox.com/security/fix/linux/elsa-2020-5663",
      "released": "2020-04-27T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "python-perf",
      "release": "ol 8",
      "fixedVersion": "0:5.4.17-2011.1.2.el7uek",
      "fix": "ELSA-2020-5663",
      "url": "https://patchblox.com/security/fix/linux/elsa-2020-5663",
      "released": "2020-04-27T00:00:00Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-07T06:34:28Z"
}