Ubuntu Linux Kernel Multiple Vulnerabilities

Last Update Date: 3 Apr 2025 Release Date: 2 Apr 2025 538 Views

RISK: Medium Risk

TYPE: Operating Systems - Linux

Multiple vulnerabilities were identified in Ubuntu Linux Kernel. An attacker could exploit some of these vulnerabilities to trigger denial of service condition, remote code execution, and sensitive information disclosure on the targeted system.

Note:

CVE-2024-53104 is being exploited in the wild. Linux kernel contains an out-of-bounds write vulnerability in the uvc_parse_streaming component of the USB Video Class (UVC) driver that could allow for physical escalation of privilege. Since the exploitation requires physical connection to malicious hardware, the risk level remains Medium.

CVE-2024-50302 is being exploited in the wild. This vulnerability allows an attacker to use a malicious input device to read information from the report buffer. This could be used to leak kernel memory, enabling the exploitation of additional vulnerabilities. Since the exploitation requires physical connection to malicious hardware, the risk level remains Medium.

[Updated on 2025-04-03]

Updated System / Technologies affected, Solutions, Vulnerability Identifier and Related Links.