Linux · Security advisory · March 31, 2021

ELSA-2021-9141: Security update for 2 packages

ELSA-2021-9141, released March 31, 2021, fixes 5 CVEs across 2 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
5
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0110
65th percentile

Priority of the 5 CVEs

Patch now 0 Urgent 0 High 1 Routine 4

Fixed package versions

ProductReleaseFixed in
kernel-uek-containerol 80:5.4.17-2102.200.13.el8
kernel-uek-container-debugol 80:5.4.17-2102.200.13.el8

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2021-3444 bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: ou... 7.8 0.0061 None reported
Routine CVE-2020-28588 kernel-uek: [5.4.17-2102.200.13] - bpf, selftests: Fix up some test_verifier cases for unprivileged (Piotr Krysiuk) [Orabug: 326... 5.5 0.0110 None reported
Routine CVE-2020-27171 kernel-uek: [5.4.17-2102.200.13] - bpf, selftests: Fix up some test_verifier cases for unprivileged (Piotr Krysiuk) [Orabug: 326... 6.0 0.0058 None reported
Routine CVE-2020-27170 kernel-uek: [5.4.17-2102.200.13] - bpf, selftests: Fix up some test_verifier cases for unprivileged (Piotr Krysiuk) [Orabug: 326... 4.7 0.0057 None reported
Routine CVE-2020-25639 python-perf: [5.4.17-2102.200.13] - bpf, selftests: Fix up some test_verifier cases for unprivileged (Piotr Krysiuk) [Orabug: 326... 4.4 0.0037 None reported
Showing 1 to 5 of 5 1