Linux · Security advisory · March 11, 2025
ELSA-2025-2627: Security update for 30 packages
ELSA-2025-2627, released March 11, 2025, fixes 6 CVEs across 30 products. 2 of them are being exploited (CVE-2024-53197); 2 on CISA KEV. Patch Radar priority: Patch now.
Patch now2 on CISA KEV
CVEs closed
6
None rated Critical
Exploited
2
CVE-2024-53197
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0412
90th percentile
Priority of the 6 CVEs
Patch now 2
Urgent 0
High 3
Routine 1
Fixed package versions
| Product | Release | Fixed in |
|---|---|---|
| bpftool | ol 9 | 0:7.4.0-503.31.1.el9_5 |
| kernel | ol 9 | 0:5.14.0-503.31.1.el9_5 |
| kernel-abi-stablelists | ol 9 | 0:5.14.0-503.31.1.el9_5 |
| kernel-core | ol 9 | 0:5.14.0-503.31.1.el9_5 |
| kernel-cross-headers | ol 9 | 0:5.14.0-503.31.1.el9_5 |
| kernel-debug | ol 9 | 0:5.14.0-503.31.1.el9_5 |
| kernel-debug-core | ol 9 | 0:5.14.0-503.31.1.el9_5 |
| kernel-debug-devel | ol 9 | 0:5.14.0-503.31.1.el9_5 |
| kernel-debug-devel-matched | ol 9 | 0:5.14.0-503.31.1.el9_5 |
| kernel-debug-modules | ol 9 | 0:5.14.0-503.31.1.el9_5 |
| kernel-debug-modules-core | ol 9 | 0:5.14.0-503.31.1.el9_5 |
| kernel-debug-modules-extra | ol 9 | 0:5.14.0-503.31.1.el9_5 |
| kernel-debug-uki-virt | ol 9 | 0:5.14.0-503.31.1.el9_5 |
| kernel-devel | ol 9 | 0:5.14.0-503.31.1.el9_5 |
| kernel-devel-matched | ol 9 | 0:5.14.0-503.31.1.el9_5 |
| kernel-doc | ol 9 | 0:5.14.0-503.31.1.el9_5 |
| kernel-headers | ol 9 | 0:5.14.0-503.31.1.el9_5 |
| kernel-modules | ol 9 | 0:5.14.0-503.31.1.el9_5 |
| kernel-modules-core | ol 9 | 0:5.14.0-503.31.1.el9_5 |
| kernel-modules-extra | ol 9 | 0:5.14.0-503.31.1.el9_5 |
| kernel-tools | ol 9 | 0:5.14.0-503.31.1.el9_5 |
| kernel-tools-libs | ol 9 | 0:5.14.0-503.31.1.el9_5 |
| kernel-tools-libs-devel | ol 9 | 0:5.14.0-503.31.1.el9_5 |
| kernel-uki-virt | ol 9 | 0:5.14.0-503.31.1.el9_5 |
| kernel-uki-virt-addons | ol 9 | 0:5.14.0-503.31.1.el9_5 |
| libperf | ol 9 | 0:5.14.0-503.31.1.el9_5 |
| perf | ol 9 | 0:5.14.0-503.31.1.el9_5 |
| python3-perf | ol 9 | 0:5.14.0-503.31.1.el9_5 |
| rtla | ol 9 | 0:5.14.0-503.31.1.el9_5 |
| rv | ol 9 | 0:5.14.0-503.31.1.el9_5 |
CVEs this fix closes
| Priority | CVE | Title | Impact | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| Patch now | CVE-2024-53197 | bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: H... | 7.8 | 0.0412 | KEVExploited | |
| Patch now | CVE-2024-50302 | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: H... | 6.4 | 0.0081 | KEVExploited | |
| High | CVE-2024-50264 | kernel-debug-core: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: s... | 7.8 | 0.0035 | None reported | |
| High | CVE-2023-52922 | kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu... | 7.8 | 0.0030 | None reported | |
| High | CVE-2023-52605 | bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system | 7.8 | n/a | None reported | |
| Routine | CVE-2024-53113 | kernel-tools-libs-devel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: A... | 5.5 | 0.0025 | None reported |
Showing 1 to 6 of 6
1