{
  "cveId": "CVE-2020-29569",
  "url": "https://patchblox.com/security/cve/CVE-2020-29569",
  "summary": "CVE-2020-29569 is fixed in 11 products on 1 platform, first by ELSA-2021-9007, released January 12, 2021. It is not reported as exploited. Patch Radar priority: High.",
  "title": "kernel-uek: [5.4.17-2036.103.3]\n- Revert \u0027rds: Deregister all FRWR mr with free_mr\u0027 (aru kolappan)  [Orabug: 32426610]\n\n[5.4.17-2...",
  "description": "[5.4.17-2036.103.3]\n- Revert \u0027rds: Deregister all FRWR mr with free_mr\u0027 (aru kolappan)  [Orabug: 32426610]\n\n[5.4.17-2036.103.2]\n- A/A Bonding: Fix a one-byte-off kmalloc (Hakon Bugge)  [Orabug: 32380824] \n- netfilter: add and use nf_hook_slow_list() (Florian Westphal)  [Orabug: 32372530]  {CVE-2021-20177}\n- net/rds: Fix gfp_t parameter (Hans Westgaard Ry)  [Orabug: 32372158] \n- uek-rpm: Report removed symbols also during kabi check (Somasundaram Krishnasamy)  [Orabug: 32380061] \n- uek-rpm: update kABI lists for new symbol (Dan Duval)  [Orabug: 32378206] \n- A/A Bonding: Introduce selective interface name inclusion (Hakon Bugge)  [Orabug: 32350974] \n- uek-rpm: add nfs_ssc to nano_modules (Calum Mackay)  [Orabug: 32346419] \n- target: fix XCOPY NAA identifier lookup (David Disseldorp)  [Orabug: 32248035]  {CVE-2020-28374}\n\n[5.4.17-2036.103.1]\n- mwifiex: Fix possible buffer overflows in mwifiex_cmd_802_11_ad_hoc_start (Zhang Xiaohui)  [Orabug: 32349203]  {CVE-2020-36158}\n- x86/process: Mark cpu inactive before offlining (Mridula Shastry)  [Orabug: 32234812] \n- add license checking to kABI checker (Dan Duval)  [Orabug: 32355206]\n\n[5.4.17-2036.103.0]\n- lockd: don\u0027t use interval-based rebinding over TCP (Calum Mackay)  [Orabug: 32337715] \n- tools: update header files in the tools directory (Thomas Tai)  [Orabug: 32321484] \n- perf: Fix a kABI breakage in perf_event.h (Thomas Tai)  [Orabug: 32321484] \n- perf/x86: Fix n_metric for cancelled txn (Peter Zijlstra)  [Orabug: 32321484] \n- perf/x86: Fix n_pair for cancelled txn (Peter Zijlstra)  [Orabug: 32321484] \n- perf/x86/intel: Check perf metrics feature for each CPU (Kan Liang)  [Orabug: 32321484] \n- perf/x86/intel: Support per-thread RDPMC TopDown metrics (Kan Liang)  [Orabug: 32321484] \n- perf/x86/intel: Support TopDown metrics on Ice Lake (Kan Liang)  [Orabug: 32321484] \n- perf/x86: Use event_base_rdpmc for the RDPMC userspace support (Kan Liang)  [Orabug: 32321484] \n- perf/x86: Add a macro for RDPMC offset of fixed counters (Kan Liang)  [Orabug: 32321484] \n- perf/x86/intel: Generic support for hardware TopDown metrics (Kan Liang)  [Orabug: 32321484] \n- perf/core: Add a new PERF_EV_CAP_SIBLING event capability (Kan Liang)  [Orabug: 32321484] \n- perf/core: Unify {pinned,flexible}_sched_in() (Peter Zijlstra)  [Orabug: 32321484] \n- perf/x86/intel: Use switch in intel_pmu_disable/enable_event (Kan Liang)  [Orabug: 32321484] \n- perf/x86: Keep LBR records unchanged in host context for guest usage (Like Xu)  [Orabug: 32321484] \n- perf/x86/intel: Fix the name of perf METRICS (Kan Liang)  [Orabug: 32321484] \n- perf/x86/intel: Move BTS index to 47 (Kan Liang)  [Orabug: 32321484] \n- perf/x86/intel: Introduce the fourth fixed counter (Kan Liang)  [Orabug: 32321484] \n- perf/x86/intel: Name the global status bit in NMI handler (Kan Liang)  [Orabug: 32321484] \n- perf/x86: Add constraint to create guest LBR event without hw counter (Like Xu)  [Orabug: 32321484] \n- perf/x86/lbr: Add interface to get LBR information (Like Xu)  [Orabug: 32321484] \n- perf/x86/core: Refactor hw-\u003Eidx checks and cleanup (Like Xu)  [Orabug: 32321484] \n- perf/x86/intel: Avoid unnecessary PEBS_ENABLE MSR access in PMI (Kan Liang)  [Orabug: 32321484] \n- perf/x86: Provide stubs of KVM helpers for non-Intel CPUs (Sean Christopherson)  [Orabug: 32321484] \n- partitions/efi: Enable no warning option for the GPT warnings related to alternative header (Saeed Mirzamohammadi)  [Orabug: 32302136] \n- Revert \u0027cpu/hotplug: avoid race between cpuset_hotplug_workfn and later hotplug\u0027 (Daniel Jordan)  [Orabug: 32295229] \n- cpuset: fix race between hotplug work and later CPU offline (Daniel Jordan)  [Orabug: 32295229] \n- uek-rpm: aarch64: update PMU configs for Altra (Dave Kleikamp)  [Orabug: 32290034] \n- driver/perf: Add PMU driver for the ARM DMC-620 memory controller (Tuan Phan)  [Orabug: 32290034] \n- perf: arm-cmn: Fix conversion specifiers for node type (Will Deacon)  [Orabug: 32290034] \n- perf: arm-cmn: Fix unsigned comparison to less than zero (Will Deacon)  [Orabug: 32290034] \n- perf: Add Arm CMN-600 PMU driver (Robin Murphy)  [Orabug: 32290034] \n- perf: Add Arm CMN-600 DT binding (Robin Murphy)  [Orabug: 32290034] \n- perf: arm_dsu: Support DSU ACPI devices (Tuan Phan)  [Orabug: 32290034] \n- arm64: acpi: Make apei_claim_sea() synchronise with APEI\u0027s irq work (James Morse)  [Orabug: 32290034] \n- ACPI: APEI: Kick the memory_failure() queue for synchronous errors (James Morse)  [Orabug: 32290034] \n- iommu/arm-smmu-v3: Don\u0027t reserve implementation defined register space (Jean-Philippe Brucker)  [Orabug: 32290034] \n- Revert \u0027BACKPORT: perf: Add Arm CMN-600 DT binding\u0027 (Dave Kleikamp)  [Orabug: 32290034] \n- Revert \u0027BACKPORT: WIP: perf: Add Arm CMN-600 PMU driver\u0027 (Dave Kleikamp)  [Orabug: 32290034] \n- Revert \u0027BACKPORT: WIP: perf/arm-cmn: Add ACPI support\u0027 (Dave Kleikamp)  [Orabug: 32290034] \n- Revert \u0027perf: Add ARM DMC-620 PMU driver.\u0027 (Dave Kleikamp)  [Orabug: 32290034] \n- Revert \u0027BACKPORT: ACPI / APEI: Kick the memory_failure() queue for synchronous errors\u0027 (Dave Kleikamp)  [Orabug: 32290034] \n- Revert \u0027BACKPORT: arm64: acpi: Make apei_claim_sea() synchronise with APEI\u0027s irq work\u0027 (Dave Kleikamp)  [Orabug: 32290034] \n- Revert \u0027Perf: arm-cmn: Allow irq to be shared.\u0027 (Dave Kleikamp)  [Orabug: 32290034] \n- Revert \u0027perf: arm_cmn: improve and make it work on 2P.\u0027 (Dave Kleikamp)  [Orabug: 32290034] \n- Revert \u0027perf: arm_dsu: Allow IRQ to be shared among devices.\u0027 (Dave Kleikamp)  [Orabug: 32290034] \n- Revert \u0027perf: arm_dsu: Support ACPI mode.\u0027 (Dave Kleikamp)  [Orabug: 32290034] \n- Revert \u0027perf: arm_dmc620: Update ACPI ID.\u0027 (Dave Kleikamp)  [Orabug: 32290034] \n- Revert \u0027perf: avoid breaking KABI by reusing enum\u0027 (Dave Kleikamp)  [Orabug: 32290034] \n- Revert \u0027perf/smmuv3: Allow sharing MMIO registers with the SMMU driver\u0027 (Dave Kleikamp)  [Orabug: 32290034] \n- tty: Fix -\u003Esession locking (Jann Horn)  [Orabug: 32266677]  {CVE-2020-29660}\n- tty: Fix -\u003Epgrp locking in tiocspgrp() (Jann Horn)  [Orabug: 32266677]  {CVE-2020-29660}\n- xen-blkback: set ring-\u003Exenblkd to NULL after kthread_stop() (Pawel Wieczorkiewicz)  [Orabug: 32260252]  {CVE-2020-29569}\n- xenbus/xenbus_backend: Disallow pending watch messages (SeongJae Park)  [Orabug: 32253409]  {CVE-2020-29568}\n- xen/xenbus: Count pending messages for each watch (SeongJae Park)  [Orabug: 32253409]  {CVE-2020-29568}\n- xen/xenbus/xen_bus_type: Support will_handle watch callback (SeongJae Park)  [Orabug: 32253409]  {CVE-2020-29568}\n- xen/xenbus: Add \u0027will_handle\u0027 callback support in xenbus_watch_path() (SeongJae Park)  [Orabug: 32253409]  {CVE-2020-29568}\n- xen/xenbus: Allow watches discard events before queueing (SeongJae Park)  [Orabug: 32253409]  {CVE-2020-29568}\n- KVM: x86: clflushopt should be treated as a no-op by emulation (David Edmondson)  [Orabug: 32251910]",
  "published": "2021-01-12T00:00:00Z",
  "severity": "IMPORTANT",
  "cvss": 8.8,
  "epss": 0.00396,
  "epssPercentile": 0.34044,
  "priority": "High",
  "priorityTier": 3,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "kernel-uek",
      "release": "ol 8",
      "fixedVersion": "0:5.4.17-2036.103.3.el8uek",
      "fix": "ELSA-2021-9037",
      "url": "https://patchblox.com/security/fix/linux/elsa-2021-9037",
      "released": "2021-02-08T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-container",
      "release": "ol 8",
      "fixedVersion": "0:5.4.17-2036.102.0.2.el8",
      "fix": "ELSA-2021-9007",
      "url": "https://patchblox.com/security/fix/linux/elsa-2021-9007",
      "released": "2021-01-12T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-container-debug",
      "release": "ol 8",
      "fixedVersion": "0:5.4.17-2036.102.0.2.el8",
      "fix": "ELSA-2021-9007",
      "url": "https://patchblox.com/security/fix/linux/elsa-2021-9007",
      "released": "2021-01-12T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-debug",
      "release": "ol 8",
      "fixedVersion": "0:5.4.17-2036.103.3.el8uek",
      "fix": "ELSA-2021-9037",
      "url": "https://patchblox.com/security/fix/linux/elsa-2021-9037",
      "released": "2021-02-08T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-debug-devel",
      "release": "ol 8",
      "fixedVersion": "0:5.4.17-2036.103.3.el8uek",
      "fix": "ELSA-2021-9037",
      "url": "https://patchblox.com/security/fix/linux/elsa-2021-9037",
      "released": "2021-02-08T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-devel",
      "release": "ol 8",
      "fixedVersion": "0:5.4.17-2036.103.3.el8uek",
      "fix": "ELSA-2021-9037",
      "url": "https://patchblox.com/security/fix/linux/elsa-2021-9037",
      "released": "2021-02-08T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-doc",
      "release": "ol 8",
      "fixedVersion": "0:5.4.17-2036.103.3.el8uek",
      "fix": "ELSA-2021-9037",
      "url": "https://patchblox.com/security/fix/linux/elsa-2021-9037",
      "released": "2021-02-08T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-tools",
      "release": "ol 8",
      "fixedVersion": "0:5.4.17-2036.103.3.el7uek",
      "fix": "ELSA-2021-9037",
      "url": "https://patchblox.com/security/fix/linux/elsa-2021-9037",
      "released": "2021-02-08T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-tools-libs",
      "release": "ol 8",
      "fixedVersion": "0:5.4.17-2036.103.3.el7uek",
      "fix": "ELSA-2021-9037",
      "url": "https://patchblox.com/security/fix/linux/elsa-2021-9037",
      "released": "2021-02-08T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "perf",
      "release": "ol 8",
      "fixedVersion": "0:5.4.17-2036.103.3.el7uek",
      "fix": "ELSA-2021-9037",
      "url": "https://patchblox.com/security/fix/linux/elsa-2021-9037",
      "released": "2021-02-08T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "python-perf",
      "release": "ol 8",
      "fixedVersion": "0:5.4.17-2036.103.3.el7uek",
      "fix": "ELSA-2021-9037",
      "url": "https://patchblox.com/security/fix/linux/elsa-2021-9037",
      "released": "2021-02-08T00:00:00Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-07T06:34:28Z"
}