Linux · Security advisory · February 8, 2021

ELSA-2021-9037: Security update for 9 packages

ELSA-2021-9037, released February 8, 2021, fixes 6 CVEs across 9 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
6
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0664
93rd percentile

Priority of the 6 CVEs

Patch now 0 Urgent 0 High 2 Routine 4

Fixed package versions

ProductReleaseFixed in
kernel-uekol 80:5.4.17-2036.103.3.el8uek
kernel-uek-debugol 80:5.4.17-2036.103.3.el8uek
kernel-uek-debug-develol 80:5.4.17-2036.103.3.el8uek
kernel-uek-develol 80:5.4.17-2036.103.3.el8uek
kernel-uek-docol 80:5.4.17-2036.103.3.el8uek
kernel-uek-toolsol 80:5.4.17-2036.103.3.el7uek
kernel-uek-tools-libsol 80:5.4.17-2036.103.3.el7uek
perfol 80:5.4.17-2036.103.3.el7uek
python-perfol 80:5.4.17-2036.103.3.el7uek

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2020-28374 bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: u... 8.1 0.0664 None reported
High CVE-2020-29569 kernel-uek: [5.4.17-2036.103.3] - Revert 'rds: Deregister all FRWR mr with free_mr' (aru kolappan) [Orabug: 32426610] [5.4.17-2... 8.8 0.0040 None reported
Routine CVE-2020-36158 kernel-devel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: ou... 6.7 0.0231 None reported
Routine CVE-2020-29660 kernel-debug-modules-extra: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: ou... 4.4 0.0047 None reported
Routine CVE-2020-29568 kernel-uek-container: [5.4.17-2036.102.0.2.el7] - xen-blkback: set ring->xenblkd to NULL after kthread_stop() (Pawel Wieczorkiewicz) [Orab... 6.5 0.0036 None reported
Routine CVE-2021-20177 kernel-uek-tools: [5.4.17-2036.103.3] - Revert 'rds: Deregister all FRWR mr with free_mr' (aru kolappan) [Orabug: 32426610] [5.4.17-2... 4.4 0.0028 None reported
Showing 1 to 6 of 6 1