Linux · Security advisory · February 12, 2025
ELSA-2025-20100: kernel-uek-tools security update
ELSA-2025-20100, released February 12, 2025, fixes 108 CVEs in kernel-uek-tools (version 0:5.4.17-2136.340.4.1.el7uek). 4 of them are being exploited (CVE-2024-53197); 4 on CISA KEV. Patch Radar priority: Patch now.
Patch now4 on CISA KEV
CVEs closed
108
None rated Critical
Exploited
4
CVE-2024-53197
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0412
90th percentile
Priority of the 108 CVEs
Patch now 4
Urgent 0
High 49
Routine 55
Fixed package versions
| Product | Release | Fixed in |
|---|---|---|
| kernel-uek-tools | ol 8 | 0:5.4.17-2136.340.4.1.el7uek |
CVEs this fix closes
| Priority | CVE | Title | Impact | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| Patch now | CVE-2024-53197 | bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: H... | 7.8 | 0.0412 | KEVExploited | |
| Patch now | CVE-2024-53104 | bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: m... | 7.8 | 0.0340 | KEVExploited | |
| Patch now | CVE-2024-53150 | bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: x... | 7.1 | 0.0135 | KEVExploited | |
| Patch now | CVE-2024-50302 | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: H... | 6.4 | 0.0081 | KEVExploited | |
| High | CVE-2024-49996 | kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes. The following security bu... | 7.8 | 0.0078 | None reported | |
| High | CVE-2024-53141 | bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: h... | 7.8 | 0.0040 | None reported | |
| High | CVE-2024-50264 | kernel-debug-core: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: s... | 7.8 | 0.0035 | None reported | |
| High | CVE-2024-53171 | linux: In the Linux kernel, the following vulnerability has been resolved: ubifs: authentication: Fix use-after-free in ubi... | 7.8 | 0.0032 | None reported | |
| High | CVE-2024-53061 | linux: In the Linux kernel, the following vulnerability has been resolved: media: s5p-jpeg: prevent buffer overflows The c... | 7.8 | 0.0031 | None reported | |
| High | CVE-2024-53239 | linux: In the Linux kernel, the following vulnerability has been resolved: ALSA: 6fire: Release resources at card release... | 7.8 | 0.0029 | None reported | |
| High | CVE-2024-50267 | linux: In the Linux kernel, the following vulnerability has been resolved: USB: serial: io_edgeport: fix use after free in... | 7.8 | 0.0028 | None reported | |
| High | CVE-2024-38538 | kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu... | 7.1 | 0.0028 | None reported | |
| High | CVE-2024-50301 | bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: c... | 7.1 | 0.0028 | None reported | |
| High | CVE-2024-56633 | linux: In the Linux kernel, the following vulnerability has been resolved: tcp_bpf: Fix the sk_mem_uncharge logic in tcp_bp... | 7.8 | 0.0028 | None reported | |
| High | CVE-2024-50282 | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: d... | 7.8 | 0.0027 | None reported | |
| High | CVE-2024-50269 | linux: In the Linux kernel, the following vulnerability has been resolved: usb: musb: sunxi: Fix accessing an released usb... | 7.8 | 0.0027 | None reported | |
| High | CVE-2024-56650 | linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: x_tables: fix LED ID check in led_tg_... | 7.1 | 0.0027 | None reported | |
| High | CVE-2024-53173 | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: d... | 7.8 | 0.0027 | None reported | |
| High | CVE-2024-53227 | linux: In the Linux kernel, the following vulnerability has been resolved: scsi: bfa: Fix use-after-free in bfad_im_module_... | 7.8 | 0.0027 | None reported | |
| High | CVE-2024-50278 | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: d... | 7.1 | 0.0026 | None reported | |
| High | CVE-2024-50279 | linux: In the Linux kernel, the following vulnerability has been resolved: dm cache: fix out-of-bounds access to the dirty... | 7.1 | 0.0026 | None reported | |
| High | CVE-2024-53165 | linux: In the Linux kernel, the following vulnerability has been resolved: sh: intc: Fix use-after-free bug in register_int... | 7.8 | 0.0026 | None reported | |
| High | CVE-2024-56596 | linux: In the Linux kernel, the following vulnerability has been resolved: jfs: fix array-index-out-of-bounds in jfs_readdi... | 7.8 | 0.0026 | None reported | |
| High | CVE-2024-56598 | linux: In the Linux kernel, the following vulnerability has been resolved: jfs: array-index-out-of-bounds fix in dtReadFirs... | 7.8 | 0.0026 | None reported | |
| High | CVE-2024-53174 | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: d... | 7.8 | 0.0026 | None reported |
Showing 1 to 25 of 108
1Next