Linux · Security advisory · January 10, 2022
ELSA-2022-9012: Security update for 9 packages
ELSA-2022-9012, released January 10, 2022, fixes 2 CVEs across 9 products. One of them is being exploited (CVE-2021-0920); 1 on CISA KEV. Patch Radar priority: Patch now.
Patch now1 on CISA KEV
CVEs closed
2
None rated Critical
Exploited
1
CVE-2021-0920
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0087
58th percentile
Priority of the 2 CVEs
Patch now 1
Urgent 0
High 1
Routine 0
Fixed package versions
| Product | Release | Fixed in |
|---|---|---|
| kernel-uek | ol 8 | 0:5.4.17-2136.302.7.2.el8uek |
| kernel-uek-debug | ol 8 | 0:5.4.17-2136.302.7.2.el8uek |
| kernel-uek-debug-devel | ol 8 | 0:5.4.17-2136.302.7.2.el8uek |
| kernel-uek-devel | ol 8 | 0:5.4.17-2136.302.7.2.el8uek |
| kernel-uek-doc | ol 8 | 0:5.4.17-2136.302.7.2.el8uek |
| kernel-uek-tools | ol 8 | 0:5.4.17-2136.302.7.2.el7uek |
| kernel-uek-tools-libs | ol 8 | 0:5.4.17-2136.302.7.2.el7uek |
| perf | ol 8 | 0:5.4.17-2136.302.7.2.el7uek |
| python-perf | ol 8 | 0:5.4.17-2136.302.7.2.el7uek |
CVEs this fix closes
| Priority | CVE | Title | Impact | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| Patch now | CVE-2021-0920 | bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. The following packages have be... | 8.8 | 0.0087 | KEVExploited | |
| High | CVE-2021-4155 | kernel-tools-libs-devel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: x... | 7.8 | 0.0030 | None reported |
Showing 1 to 2 of 2
1