Linux · Security advisory · April 7, 2021

ELSA-2021-1093: Security update for 20 packages

ELSA-2021-1093, released April 7, 2021, fixes 8 CVEs across 20 products. None of them is reported as exploited. Patch Radar priority: High.

High

CVEs closed

None rated Critical

Exploited

None reported

Exploitation more likely

Vendor assessment

Highest EPSS

0.0664

93rd percentile

Priority of the 8 CVEs

Patch now 0
                                Urgent 0
                                High 6
                                Routine 2

Fixed package versions

Product	Release	Fixed in
bpftool	ol 8	0:4.18.0-240.22.1.el8_3
kernel	ol 8	0:4.18.0-240.22.1.el8_3
kernel-abi-whitelists	ol 8	0:4.18.0-240.22.1.el8_3
kernel-core	ol 8	0:4.18.0-240.22.1.el8_3
kernel-cross-headers	ol 8	0:4.18.0-240.22.1.el8_3
kernel-debug	ol 8	0:4.18.0-240.22.1.el8_3
kernel-debug-core	ol 8	0:4.18.0-240.22.1.el8_3
kernel-debug-devel	ol 8	0:4.18.0-240.22.1.el8_3
kernel-debug-modules	ol 8	0:4.18.0-240.22.1.el8_3
kernel-debug-modules-extra	ol 8	0:4.18.0-240.22.1.el8_3
kernel-devel	ol 8	0:4.18.0-240.22.1.el8_3
kernel-doc	ol 8	0:4.18.0-240.22.1.el8_3
kernel-headers	ol 8	0:4.18.0-240.22.1.el8_3
kernel-modules	ol 8	0:4.18.0-240.22.1.el8_3
kernel-modules-extra	ol 8	0:4.18.0-240.22.1.el8_3
kernel-tools	ol 8	0:4.18.0-240.22.1.el8_3
kernel-tools-libs	ol 8	0:4.18.0-240.22.1.el8_3
kernel-tools-libs-devel	ol 8	0:4.18.0-240.22.1.el8_3
perf	ol 8	0:4.18.0-240.22.1.el8_3
python3-perf	ol 8	0:4.18.0-240.22.1.el8_3

CVEs this fix closes

Priority	CVE	Title	CVSS	EPSS	Exploitation
High	CVE-2020-28374	bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: u...	8.1	0.0664	None reported
High	CVE-2021-27365	kernel-debug-core: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: u...	7.8	0.0210	None reported
High	CVE-2021-26708	kernel-modules: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: u...	7.8	0.0160	None reported
High	CVE-2021-3347	kernel-doc: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: u...	7.8	0.0137	None reported
High	CVE-2021-27364	kernel-debug-core: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: u...	7.1	0.0097	None reported
High	CVE-2020-0466	kernel-rt: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high...	7.8	0.0028	None reported
Routine	CVE-2021-27363	kernel-debug-core: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: u...	4.4	0.0071	None reported
Routine	CVE-2020-27152	kernel-modules-extra: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: u...	5.5	0.0057	None reported

Also fixes CVE-2020-28374

ELSA-2021-9007
kernel-uek-container, kernel-uek-container-debug on ol 8
RHSA-2021:1081
kernel-rt, kernel-rt-core, kernel-rt-debug and 9 more on RHEL 8
RHSA-2021:1093
bpftool, kernel, kernel-abi-whitelists and 20 more on RHEL 8
ELSA-2021-9037
kernel-uek, kernel-uek-debug, kernel-uek-debug-devel and 6 more on ol 8

Vendor advisory

https://linux.oracle.com/errata/ELSA-2021-1093.html

For tools and AI agents

This page as data: JSON · Markdown

Which servers are still behind?

Patchblox compares the installed package on every Linux machine against the fixed version for its release, including machines reported through Azure Update Manager.

Get a demo