Linux · Security advisory · December 15, 2020

ELSA-2020-5996: Security update for 9 packages

ELSA-2020-5996, released December 15, 2020, fixes 7 CVEs across 9 products. None of them is reported as exploited. Patch Radar priority: High.

High

CVEs closed

None rated Critical

Exploited

None reported

Exploitation more likely

Vendor assessment

Highest EPSS

0.0576

93rd percentile

Patch now 0
                                Urgent 0
                                High 3
                                Routine 4

Fixed package versions

Priority	CVE	Title	CVSS	EPSS	Exploitation
High	CVE-2020-25668	kernel-uek: [5.4.17-2036.101.2uek] - vt: Disable KD_FONT_OP_COPY (Daniel Vetter) [Orabug: 32187738] {CVE-2020-28974} - page_fra...	7.0	0.0103	None reported
High	CVE-2020-25656	kernel-zfcpdump-core: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): For more de...	8.0	0.0044	None reported
High	CVE-2020-28915	bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: b...	7.8	0.0038	None reported
Routine	CVE-2020-12352	bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: n...	6.5	0.0576	None reported
Routine	CVE-2020-28974	bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: I...	5.0	0.0052	None reported
Routine	CVE-2020-27673	kernel-uek: [5.4.17-2036.101.2uek] - vt: Disable KD_FONT_OP_COPY (Daniel Vetter) [Orabug: 32187738] {CVE-2020-28974} - page_fra...	5.5	0.0042	None reported
Routine	CVE-2020-25704	bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: I...	6.2	0.0035	None reported