What is RHSA-2025:1253?

RHSA-2025:1253 is a security advisory published by Red Hat Product Security with High severity. Red Hat Security Advisory: kernel security update

Which CVE IDs does RHSA-2025:1253 cover?

RHSA-2025:1253 covers the following CVE IDs: CVE-2024-53104, CVE-2024-53113. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of RHSA-2025:1253?

RHSA-2025:1253 has a CVSS v3 base score of 7.0, published by Red Hat Product Security.

Which products are affected by RHSA-2025:1253?

RHSA-2025:1253 affects 136 products, including: Red Hat Enterprise Linux AppStream E4S (v.9.0); Red Hat Enterprise Linux BaseOS E4S (v.9.0); bpftool-0:5.14.0-70.124.1.el9_0.aarch64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.0); bpftool-0:5.14.0-70.124.1.el9_0.ppc64le as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.0); bpftool-0:5.14.0-70.124.1.el9_0.s390x as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.0); and others — see the full list on the advisory page.

RHSA-2025:1253HighCVSS 7.0

Red Hat Security Advisory: kernel security update

Vendor

Red Hat Product Security

Published

February 10, 2025

Last Modified

September 18, 2026

🔗 CVE IDs covered (2)

CVE-2024-53104 →CVE-2024-53113 →

📋 Description

CVE-2024-53104 — kernel: media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format CVE-2024-53113 — kernel: mm: fix NULL pointer dereference in alloc_pages_bulk_noprof

🎯 Affected products136

Red Hat Enterprise Linux AppStream E4S (v.9.0)
Red Hat Enterprise Linux BaseOS E4S (v.9.0)
bpftool-0:5.14.0-70.124.1.el9_0.aarch64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.0)
bpftool-0:5.14.0-70.124.1.el9_0.ppc64le as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.0)
bpftool-0:5.14.0-70.124.1.el9_0.s390x as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.0)
bpftool-0:5.14.0-70.124.1.el9_0.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.0)
bpftool-debuginfo-0:5.14.0-70.124.1.el9_0.aarch64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.0)
bpftool-debuginfo-0:5.14.0-70.124.1.el9_0.aarch64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.0)
bpftool-debuginfo-0:5.14.0-70.124.1.el9_0.ppc64le as a component of Red Hat Enterprise Linux AppStream E4S (v.9.0)
bpftool-debuginfo-0:5.14.0-70.124.1.el9_0.ppc64le as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.0)
bpftool-debuginfo-0:5.14.0-70.124.1.el9_0.s390x as a component of Red Hat Enterprise Linux AppStream E4S (v.9.0)
bpftool-debuginfo-0:5.14.0-70.124.1.el9_0.s390x as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.0)
bpftool-debuginfo-0:5.14.0-70.124.1.el9_0.x86_64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.0)
bpftool-debuginfo-0:5.14.0-70.124.1.el9_0.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.0)
kernel-0:5.14.0-70.124.1.el9_0.aarch64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.0)
kernel-0:5.14.0-70.124.1.el9_0.ppc64le as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.0)
kernel-0:5.14.0-70.124.1.el9_0.s390x as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.0)
kernel-0:5.14.0-70.124.1.el9_0.src as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.0)
kernel-0:5.14.0-70.124.1.el9_0.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.0)
kernel-abi-stablelists-0:5.14.0-70.124.1.el9_0.noarch as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.0)
kernel-core-0:5.14.0-70.124.1.el9_0.aarch64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.0)
kernel-core-0:5.14.0-70.124.1.el9_0.ppc64le as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.0)
kernel-core-0:5.14.0-70.124.1.el9_0.s390x as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.0)
kernel-core-0:5.14.0-70.124.1.el9_0.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.0)
kernel-debug-0:5.14.0-70.124.1.el9_0.aarch64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.0)
kernel-debug-0:5.14.0-70.124.1.el9_0.ppc64le as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.0)
kernel-debug-0:5.14.0-70.124.1.el9_0.s390x as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.0)
kernel-debug-0:5.14.0-70.124.1.el9_0.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.0)
kernel-debug-core-0:5.14.0-70.124.1.el9_0.aarch64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.0)
kernel-debug-core-0:5.14.0-70.124.1.el9_0.ppc64le as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.0)
+106 more not shown

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect. Workaround: This flaw can be mitigated by preventing the `uvcvideo` module from loading. See "How do I prevent a kernel module from loading automatically?"[1] for more information. Note that disabling this module will prevent UVC devices such as webcams or video capture devices from functioning properly. Preventing the `uvcvideo` module from loading is also an effective mitigation for OpenShift environments. Different methods of applying that mitigation are available, depending on the vulnerable cluster's configuration. See "USB CVE-2024-53104 Mitigation for OpenShift" [2] for more details. That document also details alternative mitigations available through the use of compliance profiles and USBGuard. 1: https://access.redhat.com/solutions/41278 2: https://access.redhat.com/articles/7107058

🔗 CVE IDs covered (2)

📋 Description

🎯 Affected products136

✅ Remediation

🔗 References (5)