Linux · Security advisory · March 10, 2025
RHSA-2025:2473: Security update for 23 packages
RHSA-2025:2473, released March 10, 2025, fixes 4 CVEs across 23 products. 2 of them are being exploited (CVE-2024-53197); 2 on CISA KEV. Patch Radar priority: Patch now.
Patch now2 on CISA KEV
CVEs closed
4
None rated Critical
Exploited
2
CVE-2024-53197
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0412
90th percentile
Priority of the 4 CVEs
Patch now 2
Urgent 0
High 1
Routine 1
Fixed package versions
| Product | Release | Fixed in |
|---|---|---|
| bpftool | RHEL 8 | 0:4.18.0-553.44.1.el8_10 |
| kernel | RHEL 8 | 0:4.18.0-553.44.1.el8_10 |
| kernel-abi-stablelists | RHEL 8 | 0:4.18.0-553.44.1.el8_10 |
| kernel-core | RHEL 8 | 0:4.18.0-553.44.1.el8_10 |
| kernel-debug | RHEL 8 | 0:4.18.0-553.44.1.el8_10 |
| kernel-debug-core | RHEL 8 | 0:4.18.0-553.44.1.el8_10 |
| kernel-debug-devel | RHEL 8 | 0:4.18.0-553.44.1.el8_10 |
| kernel-debug-modules | RHEL 8 | 0:4.18.0-553.44.1.el8_10 |
| kernel-debug-modules-extra | RHEL 8 | 0:4.18.0-553.44.1.el8_10 |
| kernel-devel | RHEL 8 | 0:4.18.0-553.44.1.el8_10 |
| kernel-doc | RHEL 8 | 0:4.18.0-553.44.1.el8_10 |
| kernel-modules | RHEL 8 | 0:4.18.0-553.44.1.el8_10 |
| kernel-modules-extra | RHEL 8 | 0:4.18.0-553.44.1.el8_10 |
| kernel-tools | RHEL 8 | 0:4.18.0-553.44.1.el8_10 |
| kernel-tools-libs | RHEL 8 | 0:4.18.0-553.44.1.el8_10 |
| kernel-tools-libs-devel | RHEL 8 | 0:4.18.0-553.44.1.el8_10 |
| kernel-zfcpdump | RHEL 8 | 0:4.18.0-553.44.1.el8_10 |
| kernel-zfcpdump-core | RHEL 8 | 0:4.18.0-553.44.1.el8_10 |
| kernel-zfcpdump-devel | RHEL 8 | 0:4.18.0-553.44.1.el8_10 |
| kernel-zfcpdump-modules | RHEL 8 | 0:4.18.0-553.44.1.el8_10 |
| kernel-zfcpdump-modules-extra | RHEL 8 | 0:4.18.0-553.44.1.el8_10 |
| perf | RHEL 8 | 0:4.18.0-553.44.1.el8_10 |
| python3-perf | RHEL 8 | 0:4.18.0-553.44.1.el8_10 |
CVEs this fix closes
| Priority | CVE | Title | Impact | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| Patch now | CVE-2024-53197 | bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: H... | 7.8 | 0.0412 | KEVExploited | |
| Patch now | CVE-2024-50302 | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: H... | 6.4 | 0.0081 | KEVExploited | |
| High | CVE-2024-57979 | bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: H... | 7.8 | 0.0027 | None reported | |
| Routine | CVE-2024-57807 | kernel-debug-devel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: H... | 6.4 | 0.0018 | None reported |
Showing 1 to 4 of 4
1