Linux · Security advisory · September 14, 2020

ELSA-2020-5848: Security update for 9 packages

ELSA-2020-5848, released September 14, 2020, fixes 6 CVEs across 9 products. None of them is reported as exploited. Patch Radar priority: High.

High

CVEs closed

None rated Critical

Exploited

None reported

Exploitation more likely

Vendor assessment

Highest EPSS

0.0523

92nd percentile

Patch now 0
                                Urgent 0
                                High 1
                                Routine 5

Fixed package versions

Priority	CVE	Title	CVSS	EPSS	Exploitation
High	CVE-2020-24394	bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: I...	7.1	0.0036	None reported
Routine	CVE-2020-16166	kernel-tools: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: i...	3.7	0.0523	None reported
Routine	CVE-2020-14331	kernel-tools-libs: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: n...	6.6	0.0056	None reported
Routine	CVE-2020-12771	kernel-uek: [5.4.17-2011.6.2] - Revert 'aarch64/BM: config failed, hub doesnt have any ports' (Thomas Tai) [Orabug: 31838351] [O...	5.5	0.0052	None reported
Routine	CVE-2020-10751	kernel-abi-whitelists: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: u...	6.1	0.0035	None reported
Routine	CVE-2020-10781	kernel-uek: [5.4.17-2011.6.2] - Revert 'aarch64/BM: config failed, hub doesnt have any ports' (Thomas Tai) [Orabug: 31838351] [O...	5.5	0.0031	None reported