Linux · AlmaLinux · Security advisory · November 9, 2021

ALSA-2021:4356: kernel-tools-libs-devel security update

ALSA-2021:4356, released November 9, 2021, fixes 45 CVEs in kernel-tools-libs-devel (version 4.18.0-348.el8). None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
45
None rated Critical
Exploited
0
None reported
Highest CVSS
7.8
Base score, 0 to 10
Highest EPSS
0.0760
94th percentile

Priority of the 45 CVEs

Patch now 0 Urgent 0 High 10 Routine 35

Fixed package versions

ProductReleaseFixed in
kernel-tools-libs-develalmalinux 84.18.0-348.el8

CVEs this fix closes

PriorityCVETitleCVSSEPSSExploitation
High CVE-2021-31440 kernel-debug-devel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: ou...7.0 0.0175 None reported
High CVE-2021-33033 kernel-rt-devel: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high...7.8 0.0057 None reported
High CVE-2021-3489 kernel-rt-debug-modules-extra: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high...7.8 0.0055 None reported
High CVE-2020-36386 kernel-zfcpdump: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: ou...7.1 0.0055 None reported
High CVE-2021-23133 kernel-rt-debug-kvm: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high...7.0 0.0048 None reported
High CVE-2021-20194 kernel-tools-libs-devel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: ou...7.8 0.0040 None reported
High CVE-2021-33200 bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: ou...7.8 0.0038 None reported
High CVE-2020-29368 kernel-abi-stablelists: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: ou...7.0 0.0037 None reported
High CVE-2021-3600 kernel-rt-debug-devel: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high...7.8 0.0028 None reported
High CVE-2021-3348 bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: ou...7.0 0.0026 None reported
Routine CVE-2020-26147 kernel-rt-modules: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high...5.4 0.0760 None reported
Routine CVE-2020-26139 kernel-rt-kvm: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high...5.3 0.0649 None reported
Routine CVE-2020-24586 kernel-rt-modules: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high...4.3 0.0577 None reported
Routine CVE-2020-26146 bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: ou...5.3 0.0562 None reported
Routine CVE-2020-26144 Windows Wireless Networking Spoofing Vulnerability6.5 0.0491 Exploitation Less Likely
Routine CVE-2020-26143 kernel-rt-kvm: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high...6.5 0.0417 None reported
Routine CVE-2020-24588 Windows Wireless Networking Spoofing Vulnerability6.5 0.0361 Exploitation Less Likely
Routine CVE-2020-26145 kernel-modules: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: ou...6.5 0.0352 None reported
Routine CVE-2020-26141 kernel-rt-kvm: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high...6.5 0.0307 None reported
Routine CVE-2020-26140 kernel-rt-kvm: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high...6.5 0.0292 None reported
Routine CVE-2020-24587 Windows Wireless Networking Information Disclosure Vulnerability6.5 0.0259 Exploitation Less Likely
Routine CVE-2020-36158 kernel-devel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: ou...6.7 0.0231 None reported
Routine CVE-2019-14615 kernel-rt: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high...5.5 0.0146 None reported
Routine CVE-2021-29155 kernel-debug-modules: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: ou...5.5 0.0107 None reported
Routine CVE-2021-0129 kernel-modules: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: ou...5.7 0.0083 None reported
Showing 1 to 25 of 45 1Next

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.