Linux · Security advisory · June 15, 2021

ELSA-2021-9307: Security update for 2 packages

ELSA-2021-9307, released June 15, 2021, fixes 3 CVEs across 2 products. None of them is reported as exploited. Patch Radar priority: High.

High

CVEs closed

None rated Critical

Exploited

None reported

Exploitation more likely

Vendor assessment

Highest EPSS

0.0093

60th percentile

Priority of the 3 CVEs

Patch now 0
                                Urgent 0
                                High 1
                                Routine 2

Fixed package versions

Product	Release	Fixed in
kernel-uek-container	ol 8	0:5.4.17-2102.202.5.el8
kernel-uek-container-debug	ol 8	0:5.4.17-2102.202.5.el8

CVEs this fix closes

Priority	CVE	Title	CVSS	EPSS	Exploitation
High	CVE-2021-29154	bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: f...	8.2	0.0093	None reported
Routine	CVE-2021-31916	kernel-doc: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: ou...	6.7	0.0070	None reported
Routine	CVE-2020-36310	linux: linux - security update	5.5	0.0033	None reported

Also fixes CVE-2021-29154

ALSA-2022:1988
bpftool, kernel, kernel-abi-stablelists and 17 more on almalinux 8
RHSA-2022:1988
bpftool, kernel, kernel-abi-stablelists and 20 more on RHEL 8
RHSA-2022:1975
kernel-rt, kernel-rt-core, kernel-rt-debug and 9 more on RHEL 8
RLSA-2022:1988
kernel on rocky 8
ELSA-2022-1988
bpftool, kernel, kernel-abi-stablelists and 17 more on ol 8
RLSA-2022:1975
kernel-rt on rocky 8
ELSA-2021-9306
kernel-uek, kernel-uek-debug, kernel-uek-debug-devel and 6 more on ol 8

Vendor advisory

https://linux.oracle.com/errata/ELSA-2021-9307.html

For tools and AI agents

This page as data: JSON · Markdown

Which servers are still behind?

Patchblox compares the installed package on every Linux machine against the fixed version for its release, including machines reported through Azure Update Manager.

Get a demo