Linux · Security advisory · August 10, 2021
ELSA-2021-9406: Security update for 2 packages
ELSA-2021-9406, released August 10, 2021, fixes 10 CVEs across 2 products. None of them is reported as exploited. Patch Radar priority: High.
High
CVEs closed
10
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0981
95th percentile
Priority of the 10 CVEs
Patch now 0
Urgent 0
High 2
Routine 8
Fixed package versions
| Product | Release | Fixed in |
|---|---|---|
| kernel-uek-container | ol 8 | 0:5.4.17-2102.204.4.2.el8 |
| kernel-uek-container-debug | ol 8 | 0:5.4.17-2102.204.4.2.el8 |
CVEs this fix closes
| Priority | CVE | Title | Impact | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| High | CVE-2021-33909 | kernel-core: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: s... | 7.8 | 0.0981 | None reported | |
| High | CVE-2021-23134 | kernel-uek-devel: [5.4.17-2102.204.4.2] - rds/ib: quarantine STALE mr before dereg (Manjunath Patil) [Orabug: 33150447] [5.4.17-2102.... | 7.8 | 0.0038 | None reported | |
| Routine | CVE-2020-26147 | kernel-rt-modules: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high... | 5.4 | 0.0760 | None reported | |
| Routine | CVE-2020-24586 | kernel-rt-modules: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high... | 4.3 | 0.0577 | None reported | |
| Routine | CVE-2020-24588 | Windows Wireless Networking Spoofing Vulnerability | 6.5 | 0.0361 | Exploitation Less Likely | |
| Routine | CVE-2020-26145 | kernel-modules: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: ou... | 6.5 | 0.0352 | None reported | |
| Routine | CVE-2020-26141 | kernel-rt-kvm: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high... | 6.5 | 0.0307 | None reported | |
| Routine | CVE-2020-24587 | Windows Wireless Networking Information Disclosure Vulnerability | 6.5 | 0.0259 | Exploitation Less Likely | |
| Routine | CVE-2021-3564 | bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: ou... | 6.3 | 0.0049 | None reported | |
| Routine | CVE-2020-14304 | kernel-uek: [5.4.17-2102.204.4.2] - rds/ib: quarantine STALE mr before dereg (Manjunath Patil) [Orabug: 33150447] [5.4.17-2102.... | 4.4 | 0.0038 | None reported |
Showing 1 to 10 of 10
1