Linux · Red Hat · Security advisory · May 18, 2021

RHSA-2021:1578: Security update for 23 packages

RHSA-2021:1578, released May 18, 2021, fixes 31 CVEs across 23 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
31
None rated Critical
Exploited
0
None reported
Highest CVSS
7.8
Base score, 0 to 10
Highest EPSS
0.0510
92nd percentile

Priority of the 31 CVEs

Patch now 0 Urgent 0 High 9 Routine 22

Fixed package versions

ProductReleaseFixed in
bpftoolRHEL 80:4.18.0-305.el8
kernelRHEL 80:4.18.0-305.el8
kernel-abi-stablelistsRHEL 80:4.18.0-305.el8
kernel-coreRHEL 80:4.18.0-305.el8
kernel-debugRHEL 80:4.18.0-305.el8
kernel-debug-coreRHEL 80:4.18.0-305.el8
kernel-debug-develRHEL 80:4.18.0-305.el8
kernel-debug-modulesRHEL 80:4.18.0-305.el8
kernel-debug-modules-extraRHEL 80:4.18.0-305.el8
kernel-develRHEL 80:4.18.0-305.el8
kernel-docRHEL 80:4.18.0-305.el8
kernel-modulesRHEL 80:4.18.0-305.el8
kernel-modules-extraRHEL 80:4.18.0-305.el8
kernel-toolsRHEL 80:4.18.0-305.el8
kernel-tools-libsRHEL 80:4.18.0-305.el8
kernel-tools-libs-develRHEL 80:4.18.0-305.el8
kernel-zfcpdumpRHEL 80:4.18.0-305.el8
kernel-zfcpdump-coreRHEL 80:4.18.0-305.el8
kernel-zfcpdump-develRHEL 80:4.18.0-305.el8
kernel-zfcpdump-modulesRHEL 80:4.18.0-305.el8
kernel-zfcpdump-modules-extraRHEL 80:4.18.0-305.el8
perfRHEL 80:4.18.0-305.el8
python3-perfRHEL 80:4.18.0-305.el8

CVEs this fix closes

PriorityCVETitleCVSSEPSSExploitation
High CVE-2023-1390 bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: I...7.5 0.0510 None reported
High CVE-2020-25643 bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: I...7.2 0.0329 None reported
High CVE-2020-25645 bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: I...7.5 0.0243 None reported
High CVE-2020-27786 bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: I...7.8 0.0167 None reported
High CVE-2020-14356 bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: I...7.8 0.0100 None reported
High CVE-2019-19523 bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: I...7.8 0.0041 None reported
High CVE-2020-24394 bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: I...7.1 0.0036 None reported
High CVE-2020-12362 bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: I...7.8 0.0036 None reported
High CVE-2020-25212 bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: I...7.0 0.0028 None reported
Routine CVE-2020-12464 bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: I...6.7 0.0080 None reported
Routine CVE-2020-28974 bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: I...5.0 0.0052 None reported
Routine CVE-2020-11608 bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: I...4.3 0.0051 None reported
Routine CVE-2019-19528 bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: I...6.1 0.0049 None reported
Routine CVE-2020-36694 bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: I...6.6 0.0044 None reported
Routine CVE-2020-12114 bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: I...4.7 0.0044 None reported
Routine CVE-2020-15437 bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: I...4.4 0.0043 None reported
Routine CVE-2019-18811 bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: I...5.5 0.0039 None reported
Routine CVE-2020-36322 bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: I...5.5 0.0038 None reported
Routine CVE-2020-14314 bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: I...5.5 0.0037 None reported
Routine CVE-2020-25704 bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: I...6.2 0.0035 None reported
Routine CVE-2020-12363 bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: I...5.5 0.0032 None reported
Routine CVE-2020-12364 bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: I...5.5 0.0032 None reported
Routine CVE-2020-27835 bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: I...6.4 0.0031 None reported
Routine CVE-2020-25284 bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: I...4.1 0.0031 None reported
Routine CVE-2021-3428 bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: I...5.5 0.0030 None reported
Showing 1 to 25 of 31 1Next

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.