Linux · Security advisory · March 10, 2025

RHSA-2025:2474: Security update for 12 packages

RHSA-2025:2474, released March 10, 2025, fixes 4 CVEs across 12 products. 2 of them are being exploited (CVE-2024-53197); 2 on CISA KEV. Patch Radar priority: Patch now.

Patch now2 on CISA KEV
CVEs closed
4
None rated Critical
Exploited
2
CVE-2024-53197
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0412
90th percentile

Priority of the 4 CVEs

Patch now 2 Urgent 0 High 1 Routine 1

Fixed package versions

ProductReleaseFixed in
kernel-rtRHEL 80:4.18.0-553.44.1.rt7.385.el8_10
kernel-rt-coreRHEL 80:4.18.0-553.44.1.rt7.385.el8_10
kernel-rt-debugRHEL 80:4.18.0-553.44.1.rt7.385.el8_10
kernel-rt-debug-coreRHEL 80:4.18.0-553.44.1.rt7.385.el8_10
kernel-rt-debug-develRHEL 80:4.18.0-553.44.1.rt7.385.el8_10
kernel-rt-debug-kvmRHEL 80:4.18.0-553.44.1.rt7.385.el8_10
kernel-rt-debug-modulesRHEL 80:4.18.0-553.44.1.rt7.385.el8_10
kernel-rt-debug-modules-extraRHEL 80:4.18.0-553.44.1.rt7.385.el8_10
kernel-rt-develRHEL 80:4.18.0-553.44.1.rt7.385.el8_10
kernel-rt-kvmRHEL 80:4.18.0-553.44.1.rt7.385.el8_10
kernel-rt-modulesRHEL 80:4.18.0-553.44.1.rt7.385.el8_10
kernel-rt-modules-extraRHEL 80:4.18.0-553.44.1.rt7.385.el8_10

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
Patch now CVE-2024-53197 bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: H... 7.8 0.0412 KEVExploited
Patch now CVE-2024-50302 kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: H... 6.4 0.0081 KEVExploited
High CVE-2024-57979 bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: H... 7.8 0.0027 None reported
Routine CVE-2024-57807 kernel-debug-devel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: H... 6.4 0.0018 None reported
Showing 1 to 4 of 4 1