Linux Kernel: Mehrere Schwachstellen
WID-SEC-2025-0453 · first 27.02.2025 · updated 29.10.2026 · CVSS 9,8
What it is about
Der Kernel stellt den Kern des Linux Betriebssystems dar. Ein entfernter Angreifer kann mehrere Schwachstellen im Linux Kernel ausnutzen um die Vertraulichkeit, Integrität und Verfügbarkeit zu gefährden.
Under what conditions?
Over the network.
Am I affected?
Affected according to the BSI:
- Google Container-Optimized OS
- Debian Linux
- IBM DataPower Gateway
- Amazon Linux 2
- Red Hat Enterprise Linux
- Ubuntu Linux
- SUSE Linux
- Oracle Linux
- Siemens SIMATIC S7 1500 CPU
- RESF Rocky Linux
- Dell NetWorker
- Dell Avamar
and 15 more
The installed version is usually shown under “Help → About” or in the device’s admin interface.
What helps?
Update to at least:
- Red Hat OpenShift Container Platform 4.14.49
- IBM QRadar SIEM 7.5.0 UP11 IF04
- SolarWinds Security Event Manager 2025.2.1
- IBM QRadar SIEM 7.5.0 UP13
- Dell PowerProtect Data Domain 8.4.0.0
- Dell PowerProtect Data Domain 7.10.1.70
- Dell PowerProtect Data Domain 7.13.1.40
- Dell PowerProtect Data Domain 8.3.1.10
- IBM DataPower Gateway 10.5.0.19
- IBM DataPower Gateway 10.6.0.7
- Dell Secure Connect Gateway Appliance 5.32.00.18
- Dell PowerScale OneFS 4.0.33
Is the vulnerability already being exploited?
None of the CVEs is in the CISA catalogue of exploited vulnerabilities. That does not mean there are no attacks, only that none are documented.
Information and sources
- Original BSI advisory (WID)
- SUSE Security Update SUSE-SU-2025:02000-1 vom 2025-06-18 lists.suse.com
- Kernel CVE Announce Mailingliste lore.kernel.org
- Linux Kernel CVE Announcement CVE-2022-49732 lore.kernel.org
- Linux Kernel CVE Announcement CVE-2024-49570 lore.kernel.org
- Linux Kernel CVE Announcement CVE-2024-52557 lore.kernel.org
- Linux Kernel CVE Announcement CVE-2024-52559 lore.kernel.org
- Linux Kernel CVE Announcement CVE-2024-52560 lore.kernel.org
- Linux Kernel CVE Announcement CVE-2024-54456 lore.kernel.org
- Linux Kernel CVE Announcement CVE-2024-54458 lore.kernel.org
- Linux Kernel CVE Announcement CVE-2024-57834 lore.kernel.org
- Linux Kernel CVE Announcement CVE-2024-57852 lore.kernel.org
- Linux Kernel CVE Announcement CVE-2024-57953 lore.kernel.org
- Linux Kernel CVE Announcement CVE-2024-57973 lore.kernel.org
- Linux Kernel CVE Announcement CVE-2024-57974 lore.kernel.org
- Linux Kernel CVE Announcement CVE-2024-57975 lore.kernel.org
- Linux Kernel CVE Announcement CVE-2024-57976 lore.kernel.org
- Linux Kernel CVE Announcement CVE-2024-57977 lore.kernel.org
- Linux Kernel CVE Announcement CVE-2024-57978 lore.kernel.org
- Linux Kernel CVE Announcement CVE-2024-57979 lore.kernel.org
- Linux Kernel CVE Announcement CVE-2024-57980 lore.kernel.org
- Linux Kernel CVE Announcement CVE-2024-57981 lore.kernel.org
- Linux Kernel CVE Announcement CVE-2024-57982 lore.kernel.org
- Linux Kernel CVE Announcement CVE-2024-57983 lore.kernel.org
- Linux Kernel CVE Announcement CVE-2024-57984 lore.kernel.org
- Linux Kernel CVE Announcement CVE-2024-57985 lore.kernel.org
and 865 more sources in the original advisory
CVE: CVE-2022-49732, CVE-2024-49570, CVE-2024-52557, CVE-2024-52559, CVE-2024-52560, CVE-2024-54456, CVE-2024-54458, CVE-2024-57834, CVE-2024-57852, CVE-2024-57953, CVE-2024-57973, CVE-2024-57974, CVE-2024-57975, CVE-2024-57976, CVE-2024-57977, CVE-2024-57978, CVE-2024-57979, CVE-2024-57980, CVE-2024-57981, CVE-2024-57982 …
Source: BSI warning and information service (CERT-Bund); CISA. The assessment of the conditions is my reading of the BSI text; the external pages are in their original language.