INFSA-2025:2473: kernel security update

Information about definition

Identificator: INFSA-2025:2473

Type: security

Release date: 2025-03-17 13:26:00 UTC

Information about package

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Vulnerabilities description

  • CVE-2024-50302

    A vulnerability was found in the Linux kernel's driver for Human Interface Devices. This flaw allows an attacker to use a malicious input device to read information from the report buffer. This could be used to leak kernel memory, enabling the exploitation of additional vulnerabilities.

  • CVE-2024-53197

    A vulnerability was found in the Linux kernel's USB Audio driver. This flaw allows an attacker with physical access to the system to use a malicious USB device to gain additional access. This is possible by manipulating system memory, potentially escalating privileges, or executing arbitrary code.

  • CVE-2024-57807

    In the Linux kernel, the following vulnerability has been resolved: scsi: megaraid_sas: Fix for a potential deadlock.

  • CVE-2024-57979

    In the Linux kernel, the following vulnerability has been resolved: pps: Fix a use-after-free.

Severity level

CVE Score CVSS 2.0 Score CVSS 3.x Score CVSS 4.0
no information 6.1 no information
no information 5.8 no information
no information 4.1 no information
no information 6.4 no information
Critical, important, moderate, low

Updated packages