Linux · Security advisory · October 13, 2023

ELSA-2023-12911: Security update for 2 packages

ELSA-2023-12911, released October 13, 2023, fixes 2 CVEs across 2 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
2
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0730
94th percentile

Priority of the 2 CVEs

Patch now 0 Urgent 0 High 1 Routine 1

Fixed package versions

ProductReleaseFixed in
kernel-uek-containerol 80:5.4.17-2136.324.5.3.el8
kernel-uek-container-debugol 80:5.4.17-2136.324.5.3.el8

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2023-5090 linux: A flaw was found in KVM 7.0 0.0025 None reported
Routine CVE-2023-20569 AMD: CVE-2023-20569 Return Address Predictor 5.6 0.0730 Exploitation Less Likely
Showing 1 to 2 of 2 1