Linux · Security advisory · July 14, 2020

ELSA-2020-5756: Security update for 9 packages

ELSA-2020-5756, released July 14, 2020, fixes 6 CVEs across 9 products. None of them is reported as exploited. Patch Radar priority: High.

High

CVEs closed

None rated Critical

Exploited

None reported

Exploitation more likely

Vendor assessment

Highest EPSS

0.0308

87th percentile

Patch now 0
                                Urgent 0
                                High 1
                                Routine 5

Fixed package versions

Priority	CVE	Title	CVSS	EPSS	Exploitation
High	CVE-2020-10757	bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: u...	7.8	0.0099	None reported
Routine	CVE-2020-10711	bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * Kernel: N...	5.9	0.0308	None reported
Routine	CVE-2019-19769	kernel-uek: [5.4.17-2011.4.4uek] - KVM: VMX: Explicitly clear RFLAGS.CF and RFLAGS.ZF in VM-Exit RSB path (Sean Christopherson)...	6.7	0.0135	None reported
Routine	CVE-2020-12770	kernel-abi-whitelists: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: u...	6.7	0.0059	None reported
Routine	CVE-2020-0543	microcode_ctl: The microcode_ctl packages provide microcode updates for Intel. Security Fix(es): * hw: Special Register Buffer Dat...	6.5	0.0054	None reported
Routine	CVE-2020-12655	bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: u...	5.5	0.0045	None reported