Linux · Security advisory · May 18, 2020

ELSA-2020-5691: Security update for 9 packages

ELSA-2020-5691, released May 18, 2020, fixes 6 CVEs across 9 products. None of them is reported as exploited. Patch Radar priority: High.

High

CVEs closed

None rated Critical

Exploited

None reported

Exploitation more likely

Vendor assessment

Highest EPSS

0.0059

48th percentile

Patch now 0
                                Urgent 0
                                High 1
                                Routine 5

Fixed package versions

Priority	CVE	Title	CVSS	EPSS	Exploitation
High	CVE-2020-11668	bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: u...	7.1	0.0048	None reported
Routine	CVE-2020-11609	kernel-uek: [5.4.17-2011.2.2uek] - scsi: qla2xxx: Move free of fcport out of interrupt context (Joe Carnuccio) [Orabug: 31225231...	4.3	0.0059	None reported
Routine	CVE-2020-9391	kernel-uek: [5.4.17-2011.2.2uek] - scsi: qla2xxx: Move free of fcport out of interrupt context (Joe Carnuccio) [Orabug: 31225231...	5.5	0.0052	None reported
Routine	CVE-2020-11608	bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: I...	4.3	0.0051	None reported
Routine	CVE-2020-8649	kernel-abi-whitelists: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: u...	5.9	0.0049	None reported
Routine	CVE-2020-8647	kernel-zfcpdump-devel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: u...	6.1	0.0041	None reported