Linux · Security advisory · April 27, 2020

ELSA-2020-5663: Security update for 9 packages

ELSA-2020-5663, released April 27, 2020, fixes 6 CVEs across 9 products. None of them is reported as exploited. Patch Radar priority: High.

High

CVEs closed

None rated Critical

Exploited

None reported

Exploitation more likely

Vendor assessment

Highest EPSS

0.0601

93rd percentile

Patch now 0
                                Urgent 0
                                High 3
                                Routine 3

Fixed package versions

Priority	CVE	Title	CVSS	EPSS	Exploitation
High	CVE-2020-8835	kernel-uek: [5.4.17-2011.1.2] - ctf: discard CTF from the vDSO (Nick Alcock) [Orabug: 31194036] [5.4.17-2011.1.1] - slcan: Don'...	7.8	0.0601	None reported
High	CVE-2019-19768	kernel-rt: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high...	7.5	0.0415	None reported
High	CVE-2020-9383	kernel-uek: [5.4.17-2011.1.2] - ctf: discard CTF from the vDSO (Nick Alcock) [Orabug: 31194036] [5.4.17-2011.1.1] - slcan: Don'...	7.1	0.0076	None reported
Routine	CVE-2020-10942	kernel-zfcpdump-modules-extra: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: u...	5.3	0.0100	None reported
Routine	CVE-2020-11494	kernel-uek: [5.4.17-2011.1.2] - ctf: discard CTF from the vDSO (Nick Alcock) [Orabug: 31194036] [5.4.17-2011.1.1] - slcan: Don'...	4.4	0.0072	None reported
Routine	CVE-2020-8992	kernel-uek: [5.4.17-2011.1.2] - ctf: discard CTF from the vDSO (Nick Alcock) [Orabug: 31194036] [5.4.17-2011.1.1] - slcan: Don'...	5.5	0.0042	None reported