High ELSA-2020-5917 2 CVEs

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

Published Nov 10, 2020 · Updated Nov 10, 2020

Ecosystem: Oracle Linux

Summary

[4.1.12-124.44.4.1]
- powercap: restrict energy meter to root access (Kanth Ghatraju) [Orabug: 32040806] {CVE-2020-8694} {CVE-2020-8695}

Fixed packages 6

Release	Package	Fixed in
Oracle Linux · 7	kernel-uek	0:4.1.12-124.44.4.1.el7uek
Oracle Linux · 7	kernel-uek-debug	0:4.1.12-124.44.4.1.el7uek
Oracle Linux · 7	kernel-uek-debug-devel	0:4.1.12-124.44.4.1.el7uek
Oracle Linux · 7	kernel-uek-devel	0:4.1.12-124.44.4.1.el7uek
Oracle Linux · 7	kernel-uek-doc	0:4.1.12-124.44.4.1.el7uek
Oracle Linux · 7	kernel-uek-firmware	0:4.1.12-124.44.4.1.el7uek

Vulnerabilities 2

Unscored —

CVE-2020-8694 Public exploit

Insufficient access control in the Linux kernel driver for some Intel(R) Processors may allow an authenticated user to …

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Alpine

Nov 12, 2020
Unscored —

CVE-2020-8695

Observable discrepancy in the RAPL interface for some Intel(R) Processors may allow a privileged user to potentially en…

intel-microcode intel-microcode Debian Ubuntu

Nov 12, 2020