Linux · Security advisory · May 10, 2021

ELSA-2021-9220: Security update for 9 packages

ELSA-2021-9220, released May 10, 2021, fixes 8 CVEs across 9 products. None of them is reported as exploited. Patch Radar priority: High.

High

CVEs closed

None rated Critical

Exploited

None reported

Exploitation more likely

Vendor assessment

Highest EPSS

0.0071

53rd percentile

Patch now 0
                                Urgent 0
                                High 1
                                Routine 7

Fixed package versions

Priority	CVE	Title	CVSS	EPSS	Exploitation
High	CVE-2021-29266	kernel-uek-doc: [5.4.17-2102.201.3uek] - locking/qrwlock: Fix ordering in queued_write_lock_slowpath() (Ali Saidi) [Orabug: 32805544...	7.8	0.0032	None reported
Routine	CVE-2021-28038	kernel-uek: [5.4.17-2102.201.3uek] - locking/qrwlock: Fix ordering in queued_write_lock_slowpath() (Ali Saidi) [Orabug: 32805544...	6.5	0.0071	None reported
Routine	CVE-2021-29650	bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: ou...	5.5	0.0041	None reported
Routine	CVE-2021-3411	kernel-uek: [5.4.17-2102.201.3uek] - locking/qrwlock: Fix ordering in queued_write_lock_slowpath() (Ali Saidi) [Orabug: 32805544...	6.7	0.0040	None reported
Routine	CVE-2021-28971	kernel-rt: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high...	5.5	0.0039	None reported
Routine	CVE-2021-28950	kernel-rt: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high...	5.5	0.0036	None reported
Routine	CVE-2021-28688	kernel-uek: [5.4.17-2102.201.3uek] - locking/qrwlock: Fix ordering in queued_write_lock_slowpath() (Ali Saidi) [Orabug: 32805544...	6.5	0.0034	None reported
Routine	CVE-2021-28964	kernel-uek: [5.4.17-2102.201.3uek] - locking/qrwlock: Fix ordering in queued_write_lock_slowpath() (Ali Saidi) [Orabug: 32805544...	4.7	0.0027	None reported