Linux · Security advisory · May 25, 2021

ELSA-2021-1578: Security update for 20 packages

ELSA-2021-1578, released May 25, 2021, fixes 23 CVEs across 20 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
23
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0329
88th percentile

Priority of the 23 CVEs

Patch now 0 Urgent 0 High 7 Routine 16

Fixed package versions

ProductReleaseFixed in
bpftoolol 80:4.18.0-305.el8
kernelol 80:4.18.0-305.el8
kernel-abi-stablelistsol 80:4.18.0-305.el8
kernel-coreol 80:4.18.0-305.el8
kernel-cross-headersol 80:4.18.0-305.el8
kernel-debugol 80:4.18.0-305.el8
kernel-debug-coreol 80:4.18.0-305.el8
kernel-debug-develol 80:4.18.0-305.el8
kernel-debug-modulesol 80:4.18.0-305.el8
kernel-debug-modules-extraol 80:4.18.0-305.el8
kernel-develol 80:4.18.0-305.el8
kernel-docol 80:4.18.0-305.el8
kernel-headersol 80:4.18.0-305.el8
kernel-modulesol 80:4.18.0-305.el8
kernel-modules-extraol 80:4.18.0-305.el8
kernel-toolsol 80:4.18.0-305.el8
kernel-tools-libsol 80:4.18.0-305.el8
kernel-tools-libs-develol 80:4.18.0-305.el8
perfol 80:4.18.0-305.el8
python3-perfol 80:4.18.0-305.el8

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2020-25643 bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: I... 7.2 0.0329 None reported
High CVE-2020-27786 bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: I... 7.8 0.0167 None reported
High CVE-2020-14356 bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: I... 7.8 0.0100 None reported
High CVE-2019-19523 bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: I... 7.8 0.0041 None reported
High CVE-2020-24394 bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: I... 7.1 0.0036 None reported
High CVE-2020-12362 bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: I... 7.8 0.0036 None reported
High CVE-2020-25212 bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: I... 7.0 0.0028 None reported
Routine CVE-2020-12464 bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: I... 6.7 0.0080 None reported
Routine CVE-2020-28974 bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: I... 5.0 0.0052 None reported
Routine CVE-2020-11608 bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: I... 4.3 0.0051 None reported
Routine CVE-2019-19528 bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: I... 6.1 0.0049 None reported
Routine CVE-2020-12114 bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: I... 4.7 0.0044 None reported
Routine CVE-2020-15437 bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: I... 4.4 0.0043 None reported
Routine CVE-2019-18811 bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: I... 5.5 0.0039 None reported
Routine CVE-2020-36322 bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: I... 5.5 0.0038 None reported
Routine CVE-2020-14314 bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: I... 5.5 0.0037 None reported
Routine CVE-2020-25704 bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: I... 6.2 0.0035 None reported
Routine CVE-2020-27835 bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: I... 6.4 0.0031 None reported
Routine CVE-2020-25284 bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: I... 4.1 0.0031 None reported
Routine CVE-2020-25285 bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: I... 6.4 0.0027 None reported
Routine CVE-2020-35508 bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: I... 4.5 0.0023 None reported
Routine CVE-2020-0431 bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: I... 6.7 0.0022 None reported
Routine CVE-2021-0342 bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: I... 6.7 0.0018 None reported
Showing 1 to 23 of 23 1