Linux · Security advisory · February 16, 2021

RHSA-2021:0558: Security update for 23 packages

RHSA-2021:0558, released February 16, 2021, fixes 3 CVEs across 23 products. None of them is reported as exploited. Patch Radar priority: High.

High

CVEs closed

None rated Critical

Exploited

None reported

Exploitation more likely

Vendor assessment

Highest EPSS

0.0669

93rd percentile

Priority of the 3 CVEs

Patch now 0
                                Urgent 0
                                High 3
                                Routine 0

Fixed package versions

Product	Release	Fixed in
bpftool	RHEL 8	0:4.18.0-240.15.1.el8_3
kernel	RHEL 8	0:4.18.0-240.15.1.el8_3
kernel-abi-whitelists	RHEL 8	0:4.18.0-240.15.1.el8_3
kernel-core	RHEL 8	0:4.18.0-240.15.1.el8_3
kernel-debug	RHEL 8	0:4.18.0-240.15.1.el8_3
kernel-debug-core	RHEL 8	0:4.18.0-240.15.1.el8_3
kernel-debug-devel	RHEL 8	0:4.18.0-240.15.1.el8_3
kernel-debug-modules	RHEL 8	0:4.18.0-240.15.1.el8_3
kernel-debug-modules-extra	RHEL 8	0:4.18.0-240.15.1.el8_3
kernel-devel	RHEL 8	0:4.18.0-240.15.1.el8_3
kernel-doc	RHEL 8	0:4.18.0-240.15.1.el8_3
kernel-modules	RHEL 8	0:4.18.0-240.15.1.el8_3
kernel-modules-extra	RHEL 8	0:4.18.0-240.15.1.el8_3
kernel-tools	RHEL 8	0:4.18.0-240.15.1.el8_3
kernel-tools-libs	RHEL 8	0:4.18.0-240.15.1.el8_3
kernel-tools-libs-devel	RHEL 8	0:4.18.0-240.15.1.el8_3
kernel-zfcpdump	RHEL 8	0:4.18.0-240.15.1.el8_3
kernel-zfcpdump-core	RHEL 8	0:4.18.0-240.15.1.el8_3
kernel-zfcpdump-devel	RHEL 8	0:4.18.0-240.15.1.el8_3
kernel-zfcpdump-modules	RHEL 8	0:4.18.0-240.15.1.el8_3
kernel-zfcpdump-modules-extra	RHEL 8	0:4.18.0-240.15.1.el8_3
perf	RHEL 8	0:4.18.0-240.15.1.el8_3
python3-perf	RHEL 8	0:4.18.0-240.15.1.el8_3

CVEs this fix closes

Priority	CVE	Title	CVSS	EPSS	Exploitation
High	CVE-2020-25705	bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: l...	7.4	0.0669	None reported
High	CVE-2020-29661	bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: l...	7.8	0.0112	None reported
High	CVE-2020-14351	kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: l...	7.8	0.0031	None reported

Also fixes CVE-2020-25705

ELSA-2021-9007
kernel-uek-container, kernel-uek-container-debug on ol 8
ELSA-2021-0558
bpftool, kernel, kernel-abi-whitelists and 17 more on ol 8
RHSA-2021:0537
kernel-rt, kernel-rt-core, kernel-rt-debug and 9 more on RHEL 8
ELSA-2021-9006
kernel-uek, kernel-uek-debug, kernel-uek-debug-devel and 6 more on ol 8

Vendor advisory

https://access.redhat.com/errata/RHSA-2021:0558

For tools and AI agents

This page as data: JSON · Markdown

Which servers are still behind?

Patchblox compares the installed package on every Linux machine against the fixed version for its release, including machines reported through Azure Update Manager.

Get a demo