{
  "cveId": "CVE-2020-16120",
  "url": "https://patchblox.com/security/cve/CVE-2020-16120",
  "summary": "CVE-2020-16120 is fixed in 11 products on 1 platform, first by ELSA-2021-9086, released March 9, 2021. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "kernel-uek-devel: [5.4.17-2036.104.4.el8uek]\n- KVM: arm64: guest context in x18 instead of x29 (Mihai Carabas)  [Orabug: 32545182]\n\n[5....",
  "description": "[5.4.17-2036.104.4.el8uek]\n- KVM: arm64: guest context in x18 instead of x29 (Mihai Carabas)  [Orabug: 32545182]\n\n[5.4.17-2036.104.3.el8uek]\n- config: enable CONFIG_MLX5_MPFS (Brian Maly)  [Orabug: 32249042] \n- net: Fix bridge enslavement failure (Ido Schimmel)  [Orabug: 32503298] \n- inet: do not call sublist_rcv on empty list (Florian Westphal)  [Orabug: 32512814] \n- KVM: arm64: pmu: Dont mark a counter as chained if the odd one is disabled (Eric Auger)  [Orabug: 32499188] \n- random: wire /dev/random with a DRBG instance (Saeed Mirzamohammadi)  [Orabug: 32522087] \n- crypto: drbg - always try to free Jitter RNG instance (Stephan Muller)  [Orabug: 32522087] \n- crypto: drbg - always seeded with SP800-90B compliant noise source (Stephan Muller)  [Orabug: 32522087] \n- crypto: jitter - SP800-90B compliance (Stephan Muller)  [Orabug: 32522087] \n- crypto: jitter - add header to fix buildwarnings (Ben Dooks)  [Orabug: 32522087] \n- crypto: jitter - fix comments (Alexander E. Patrakov)  [Orabug: 32522087] \n- xen-blkback: fix error handling in xen_blkbk_map() (Jan Beulich)  [Orabug: 32492109]  {CVE-2021-26930}\n- xen-scsiback: dont \u0027handle\u0027 error by BUG() (Jan Beulich)  [Orabug: 32492101]  {CVE-2021-26931}\n- xen-netback: dont \u0027handle\u0027 error by BUG() (Jan Beulich)  [Orabug: 32492101]  {CVE-2021-26931}\n- xen-blkback: dont \u0027handle\u0027 error by BUG() (Jan Beulich)  [Orabug: 32492101]  {CVE-2021-26931}\n- Xen/gntdev: correct error checking in gntdev_map_grant_pages() (Jan Beulich)  [Orabug: 32492093]  {CVE-2021-26932}\n- Xen/gntdev: correct dev_bus_addr handling in gntdev_map_grant_pages() (Jan Beulich)  [Orabug: 32492093]  {CVE-2021-26932}\n- Xen/x86: also check kernel mapping in set_foreign_p2m_mapping() (Jan Beulich)  [Orabug: 32492093]  {CVE-2021-26932}\n- Xen/x86: dont bail early from clear_foreign_p2m_mapping() (Jan Beulich)  [Orabug: 32492093]  {CVE-2021-26932}\n\n[5.4.17-2036.104.2.el8uek]\n- tcp: fix to update snd_wl1 in bulk receiver fast path (Neal Cardwell)  [Orabug: 32498822] \n- selinux: allow reading labels before policy is loaded (Jonathan Lebon)  [Orabug: 32492277] \n- selinux: allow labeling before policy is loaded (Jonathan Lebon)  [Orabug: 32492277] \n- KVM: SVM: Initialize prev_ga_tag before use (Suravee Suthikulpanit)  [Orabug: 32478549] \n- tools/power turbostat: Support additional CPU model numbers (Len Brown)  [Orabug: 32422451] \n- x86/cpu: Add Lakefield, Alder Lake and Rocket Lake models to the to Intel CPU family (Tony Luck)  [Orabug: 32422451] \n- x86/cpu: Add Sapphire Rapids CPU model number (Tony Luck)  [Orabug: 32422451] \n- tools/power turbostat: Support Tiger Lake (Chen Yu)  [Orabug: 32422451] \n- uek-rpm: config-aarch64: enable MEMORY HOTREMOVE (Mihai Carabas)  [Orabug: 32353851] \n- arm64/mm/hotplug: Ensure early memory sections are all online (Anshuman Khandual)  [Orabug: 32353851] \n- arm64/mm/hotplug: Enable MEM_OFFLINE event handling (Anshuman Khandual)  [Orabug: 32353851] \n- arm64/mm/hotplug: Register boot memory hot remove notifier earlier (Anshuman Khandual)  [Orabug: 32353851] \n- arm64/mm: Enable memory hot remove (Anshuman Khandual)  [Orabug: 32353851] \n- arm64/mm: Hold memory hotplug lock while walking for kernel page table dump (Anshuman Khandual)  [Orabug: 32353851] \n- KVM: arm64: Save/restore sp_el0 as part of __guest_enter (Marc Zyngier)  [Orabug: 32171445] \n- net/mlx4_en: Handle TX error CQE (Moshe Shemesh)  [Orabug: 32492969] \n- net/mlx4_en: Avoid scheduling restart task if it is already running (Moshe Shemesh)  [Orabug: 32492969]\n\n[5.4.17-2036.104.1.el8uek]\n- vhost scsi: alloc vhost_scsi with kvzalloc() to avoid delay (Dongli Zhang)  [Orabug: 32471677] \n- HID: hid-input: fix stylus battery reporting (Dmitry Torokhov)  [Orabug: 32464784]  {CVE-2020-0431}\n- nbd: freeze the queue while were adding connections (Josef Bacik)  [Orabug: 32447285]  {CVE-2021-3348}\n- futex: Handle faults correctly for PI futexes (Thomas Gleixner)  [Orabug: 32447187]  {CVE-2021-3347}\n- futex: Simplify fixup_pi_state_owner() (Thomas Gleixner)  [Orabug: 32447187]  {CVE-2021-3347}\n- futex: Use pi_state_update_owner() in put_pi_state() (Thomas Gleixner)  [Orabug: 32447187]  {CVE-2021-3347}\n- rtmutex: Remove unused argument from rt_mutex_proxy_unlock() (Thomas Gleixner)  [Orabug: 32447187]  {CVE-2021-3347}\n- futex: Dont enable IRQs unconditionally in put_pi_state() (Dan Carpenter)  [Orabug: 32447187]  {CVE-2021-3347}\n- futex: Provide and use pi_state_update_owner() (Thomas Gleixner)  [Orabug: 32447187]  {CVE-2021-3347}\n- futex: Replace pointless printk in fixup_owner() (Thomas Gleixner)  [Orabug: 32447187]  {CVE-2021-3347}\n- futex: Ensure the correct return value from futex_lock_pi() (Thomas Gleixner)  [Orabug: 32447187]  {CVE-2021-3347}\n- uek-rpm: Enable Oracle Pilot BMC module (Eric Snowberg)  [Orabug: 32422662] \n- hwmon: Add a new Oracle Pilot BMC driver (Eric Snowberg)  [Orabug: 32422662] \n- arm64: Reserve only 256M on RPi for crashkernel=auto (Vijay Kumar)  [Orabug: 32301026]\n\n[5.4.17-2036.104.0.el8uek]\n- Revert \u0027rds: Deregister all FRWR mr with free_mr\u0027 (aru kolappan)  [Orabug: 32426610] \n- thermal: intel_pch_thermal: Add PCI ids for Lewisburg PCH. (Andres Freund)  [Orabug: 32424705] \n- thermal: intel: intel_pch_thermal: Add Cannon Lake Low Power PCH support (Sumeet Pawnikar)  [Orabug: 32424705] \n- thermal: intel: intel_pch_thermal: Add Comet Lake (CML) platform support (Gayatri Kammela)  [Orabug: 32424705] \n- nfs: Fix security label length not being reset (Jeffrey Mitchell)  [Orabug: 32350989] \n- ovl: check permission to open real file (Miklos Szeredi)  [Orabug: 32046372]  {CVE-2020-16120}\n- ovl: verify permissions in ovl_path_open() (Miklos Szeredi)  [Orabug: 32046372]  {CVE-2020-16120}\n- ovl: switch to mounter creds in readdir (Miklos Szeredi)  [Orabug: 32046372]  {CVE-2020-16120}\n- ovl: pass correct flags for opening real directory (Miklos Szeredi)  [Orabug: 32046372] \n- A/A Bonding: Add synchronized bundle failback (Gerd Rausch)  [Orabug: 32381883]",
  "published": "2021-03-09T00:00:00Z",
  "severity": "IMPORTANT",
  "cvss": 4.4,
  "epss": 0.00417,
  "epssPercentile": 0.36178,
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "kernel-uek",
      "release": "ol 8",
      "fixedVersion": "0:5.4.17-2036.104.4.el8uek",
      "fix": "ELSA-2021-9085",
      "url": "https://patchblox.com/security/fix/linux/elsa-2021-9085",
      "released": "2021-03-11T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-container",
      "release": "ol 8",
      "fixedVersion": "0:5.4.17-2036.104.4.el8",
      "fix": "ELSA-2021-9086",
      "url": "https://patchblox.com/security/fix/linux/elsa-2021-9086",
      "released": "2021-03-09T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-container-debug",
      "release": "ol 8",
      "fixedVersion": "0:5.4.17-2036.104.4.el8",
      "fix": "ELSA-2021-9086",
      "url": "https://patchblox.com/security/fix/linux/elsa-2021-9086",
      "released": "2021-03-09T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-debug",
      "release": "ol 8",
      "fixedVersion": "0:5.4.17-2036.104.4.el8uek",
      "fix": "ELSA-2021-9085",
      "url": "https://patchblox.com/security/fix/linux/elsa-2021-9085",
      "released": "2021-03-11T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-debug-devel",
      "release": "ol 8",
      "fixedVersion": "0:5.4.17-2036.104.4.el8uek",
      "fix": "ELSA-2021-9085",
      "url": "https://patchblox.com/security/fix/linux/elsa-2021-9085",
      "released": "2021-03-11T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-devel",
      "release": "ol 8",
      "fixedVersion": "0:5.4.17-2036.104.4.el8uek",
      "fix": "ELSA-2021-9085",
      "url": "https://patchblox.com/security/fix/linux/elsa-2021-9085",
      "released": "2021-03-11T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-doc",
      "release": "ol 8",
      "fixedVersion": "0:5.4.17-2036.104.4.el8uek",
      "fix": "ELSA-2021-9085",
      "url": "https://patchblox.com/security/fix/linux/elsa-2021-9085",
      "released": "2021-03-11T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-tools",
      "release": "ol 8",
      "fixedVersion": "0:5.4.17-2036.104.4.el7uek",
      "fix": "ELSA-2021-9085",
      "url": "https://patchblox.com/security/fix/linux/elsa-2021-9085",
      "released": "2021-03-11T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-tools-libs",
      "release": "ol 8",
      "fixedVersion": "0:5.4.17-2036.104.4.el7uek",
      "fix": "ELSA-2021-9085",
      "url": "https://patchblox.com/security/fix/linux/elsa-2021-9085",
      "released": "2021-03-11T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "perf",
      "release": "ol 8",
      "fixedVersion": "0:5.4.17-2036.104.4.el7uek",
      "fix": "ELSA-2021-9085",
      "url": "https://patchblox.com/security/fix/linux/elsa-2021-9085",
      "released": "2021-03-11T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "python-perf",
      "release": "ol 8",
      "fixedVersion": "0:5.4.17-2036.104.4.el7uek",
      "fix": "ELSA-2021-9085",
      "url": "https://patchblox.com/security/fix/linux/elsa-2021-9085",
      "released": "2021-03-11T00:00:00Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-07T06:34:28Z"
}