Red Hat Patches Linux Kernel Use-After-Free and Device-Driver Flaws
Patch & Detection Intelligence · 5 sources · Updated 3mo ago · First seen Mar 10, 2025
Red Hat released Important kernel security updates for RHEL 7.7 Advanced Update Support, RHEL 8 Real Time/NFV and 8.10 Extended Life Cycle, and RHEL 9.0 Update Services for SAP Solutions. The updates remediate an uninitialized HID report-buffer flaw (CVE-2024-50302), a use-after-free in CAN BCM processing (CVE-2023-52922), and out-of-bounds access risks in ALSA USB-audio support for Extigy and Mbox devices (CVE-2024-53197).
The RHEL 8 kernel-rt update also fixes CVE-2024-57979, a PPS subsystem use-after-free that can occur when a PPS source is unregistered while character-device operations remain open, potentially causing memory corruption and kernel panic. Organizations should deploy the applicable fixed packages—including kernel-rt-4.18.0-553.44.1.rt7.385.el8_10, kernel-3.10.0-1062.93.1.el7, or kernel-rt-5.14.0-70.125.1.rt21.197.el9_0—and reboot affected hosts to activate the patched kernel; the advisories do not report known in-the-wild exploitation.
