{
  "cveId": "CVE-2020-12768",
  "url": "https://patchblox.com/security/cve/CVE-2020-12768",
  "summary": "CVE-2020-12768 is fixed in 9 products on 1 platform, first by ELSA-2020-5714, released June 9, 2020. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "kernel-uek: [5.4.17-2011.3.2.1uek]\n- x86/speculation: Add Ivy Bridge to affected list (Josh Poimboeuf)  [Orabug: 31352779]  {CVE-...",
  "description": "[5.4.17-2011.3.2.1uek]\n- x86/speculation: Add Ivy Bridge to affected list (Josh Poimboeuf)  [Orabug: 31352779]  {CVE-2020-0543}\n- x86/speculation: Add SRBDS vulnerability and mitigation documentation (Mark Gross)  [Orabug: 31352779]  {CVE-2020-0543}\n- x86/speculation: Add Special Register Buffer Data Sampling (SRBDS) mitigation (Mark Gross)  [Orabug: 31352779]  {CVE-2020-0543}\n- x86/cpu: Add \u0027table\u0027 argument to cpu_matches() (Mark Gross)  [Orabug: 31352779]  {CVE-2020-0543}\n- x86/cpu: Add a steppings field to struct x86_cpu_id (Mark Gross)  [Orabug: 31352779]  {CVE-2020-0543}\n- x86/speculation/spectre_v2: Exclude Zhaoxin CPUs from SPECTRE_V2 (Tony W Wang-oc)  [Orabug: 31352779]  {CVE-2020-0543}\n\n[5.4.17-2011.3.2uek]\n- USB: core: Fix free-while-in-use bug in the USB S-Glibrary (Alan Stern)  [Orabug: 31350962]  {CVE-2020-12464}\n- mt76: fix array overflow on receiving too many fragments for a packet (Felix Fietkau)  [Orabug: 31350952]  {CVE-2020-12465}\n- mwifiex: Fix possible buffer overflows in mwifiex_cmd_append_vsie_tlv() (Qing Xu)  [Orabug: 31350929]  {CVE-2020-12653}\n- block, bfq: fix use-after-free in bfq_idle_slice_timer_body (Zhiqiang Liu)  [Orabug: 31350910]  {CVE-2020-12657}\n- xsk: Add missing check on user supplied headroom size (Magnus Karlsson)  [Orabug: 31350732]  {CVE-2020-12659}\n- mwifiex: Fix possible buffer overflows in mwifiex_ret_wmm_get_status() (Qing Xu)  [Orabug: 31350513]  {CVE-2020-12654}\n- xen/manage: enable C_A_D to force reboot (Dongli Zhang)  [Orabug: 31387411] \n- KVM: x86: Fixes posted interrupt check for IRQs delivery modes (Suravee Suthikulpanit)  [Orabug: 31316437] \n- Revert \u0027Revert \u0027nvme_fc: add module to ops template to allow module references\u0027\u0027 (James Smart)  [Orabug: 31377552] \n- uek-rpm: Move grub boot menu update to posttrans stage. (Somasundaram Krishnasamy)  [Orabug: 31358097] \n- KVM: SVM: Fix potential memory leak in svm_cpu_init() (Miaohe Lin)  [Orabug: 31350455]  {CVE-2020-12768}\n\n[5.4.17-2011.3.1uek]\n- intel_idle: Use ACPI _CST for processor models without C-state tables (Rafael J. Wysocki)  [Orabug: 31332120] \n- ACPI: processor: Export acpi_processor_evaluate_cst() (Rafael J. Wysocki)  [Orabug: 31332120] \n- ACPI: processor: Clean up acpi_processor_evaluate_cst() (Rafael J. Wysocki)  [Orabug: 31332120] \n- ACPI: processor: Introduce acpi_processor_evaluate_cst() (Rafael J. Wysocki)  [Orabug: 31332120] \n- ACPI: processor: Export function to claim _CST control (Rafael J. Wysocki)  [Orabug: 31332120] \n- rds: ib: Fix dysfunctional long address resolve timeout (Hakon Bugge)  [Orabug: 31302704] \n- KVM: x86: Revert \u0027KVM: X86: Fix fpu state crash in kvm guest\u0027 (Sean Christopherson)  [Orabug: 31333676] \n- KVM: x86: Ensure guests FPU state is loaded when accessing for emulation (Sean Christopherson)  [Orabug: 31333676] \n- KVM: x86: Handle TIF_NEED_FPU_LOAD in kvm_{load,put}_guest_fpu() (Sean Christopherson)  [Orabug: 31333676] \n- net: dsa: Do not leave DSA master with NULL netdev_ops (Florian Fainelli)  [Orabug: 30456791] \n- Revert \u0027dsa: disable module unloading for ARM64\u0027 (Allen Pais)  [Orabug: 30456791]\n\n[5.4.17-2011.3.0uek]\n- NFSv4.0: nfs4_do_fsinfo() should not do implicit lease renewals (Robert Milkowski)  [Orabug: 31304406] \n- NFSv4: try lease recovery on NFS4ERR_EXPIRED (Robert Milkowski)  [Orabug: 31304406] \n- btrfs: Dont submit any btree write bio if the fs has errors (Qu Wenruo)  [Orabug: 31265336]  {CVE-2019-19377} {CVE-2019-19377}",
  "published": "2020-06-09T00:00:00Z",
  "severity": "IMPORTANT",
  "cvss": 5.5,
  "epss": 0.00392,
  "epssPercentile": 0.33497,
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "kernel-uek",
      "release": "ol 8",
      "fixedVersion": "0:5.4.17-2011.3.2.1.el8uek",
      "fix": "ELSA-2020-5714",
      "url": "https://patchblox.com/security/fix/linux/elsa-2020-5714",
      "released": "2020-06-09T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-debug",
      "release": "ol 8",
      "fixedVersion": "0:5.4.17-2011.3.2.1.el8uek",
      "fix": "ELSA-2020-5714",
      "url": "https://patchblox.com/security/fix/linux/elsa-2020-5714",
      "released": "2020-06-09T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-debug-devel",
      "release": "ol 8",
      "fixedVersion": "0:5.4.17-2011.3.2.1.el8uek",
      "fix": "ELSA-2020-5714",
      "url": "https://patchblox.com/security/fix/linux/elsa-2020-5714",
      "released": "2020-06-09T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-devel",
      "release": "ol 8",
      "fixedVersion": "0:5.4.17-2011.3.2.1.el8uek",
      "fix": "ELSA-2020-5714",
      "url": "https://patchblox.com/security/fix/linux/elsa-2020-5714",
      "released": "2020-06-09T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-doc",
      "release": "ol 8",
      "fixedVersion": "0:5.4.17-2011.3.2.1.el8uek",
      "fix": "ELSA-2020-5714",
      "url": "https://patchblox.com/security/fix/linux/elsa-2020-5714",
      "released": "2020-06-09T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-tools",
      "release": "ol 8",
      "fixedVersion": "0:5.4.17-2011.3.2.1.el7uek",
      "fix": "ELSA-2020-5714",
      "url": "https://patchblox.com/security/fix/linux/elsa-2020-5714",
      "released": "2020-06-09T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-tools-libs",
      "release": "ol 8",
      "fixedVersion": "0:5.4.17-2011.3.2.1.el7uek",
      "fix": "ELSA-2020-5714",
      "url": "https://patchblox.com/security/fix/linux/elsa-2020-5714",
      "released": "2020-06-09T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "perf",
      "release": "ol 8",
      "fixedVersion": "0:5.4.17-2011.3.2.1.el7uek",
      "fix": "ELSA-2020-5714",
      "url": "https://patchblox.com/security/fix/linux/elsa-2020-5714",
      "released": "2020-06-09T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "python-perf",
      "release": "ol 8",
      "fixedVersion": "0:5.4.17-2011.3.2.1.el7uek",
      "fix": "ELSA-2020-5714",
      "url": "https://patchblox.com/security/fix/linux/elsa-2020-5714",
      "released": "2020-06-09T00:00:00Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-07T06:34:28Z"
}