Linux · Security advisory · May 13, 2020

ELSA-2020-2102: Security update for 20 packages

ELSA-2020-2102, released May 13, 2020, fixes 3 CVEs across 20 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
3
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0308
87th percentile

Priority of the 3 CVEs

Patch now 0 Urgent 0 High 1 Routine 2

Fixed package versions

ProductReleaseFixed in
bpftoolol 80:4.18.0-193.1.2.el8_2
kernelol 80:4.18.0-193.1.2.el8_2
kernel-abi-whitelistsol 80:4.18.0-193.1.2.el8_2
kernel-coreol 80:4.18.0-193.1.2.el8_2
kernel-cross-headersol 80:4.18.0-193.1.2.el8_2
kernel-debugol 80:4.18.0-193.1.2.el8_2
kernel-debug-coreol 80:4.18.0-193.1.2.el8_2
kernel-debug-develol 80:4.18.0-193.1.2.el8_2
kernel-debug-modulesol 80:4.18.0-193.1.2.el8_2
kernel-debug-modules-extraol 80:4.18.0-193.1.2.el8_2
kernel-develol 80:4.18.0-193.1.2.el8_2
kernel-docol 80:4.18.0-193.1.2.el8_2
kernel-headersol 80:4.18.0-193.1.2.el8_2
kernel-modulesol 80:4.18.0-193.1.2.el8_2
kernel-modules-extraol 80:4.18.0-193.1.2.el8_2
kernel-toolsol 80:4.18.0-193.1.2.el8_2
kernel-tools-libsol 80:4.18.0-193.1.2.el8_2
kernel-tools-libs-develol 80:4.18.0-193.1.2.el8_2
perfol 80:4.18.0-193.1.2.el8_2
python3-perfol 80:4.18.0-193.1.2.el8_2

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2020-11884 kernel-tools-libs-devel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * Kernel: N... 7.0 0.0040 None reported
Routine CVE-2020-10711 bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * Kernel: N... 5.9 0.0308 None reported
Routine CVE-2020-2732 kernel-core: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * Kernel: N... 6.8 0.0093 None reported
Showing 1 to 3 of 3 1