Skip to main content
Report · GCVE DatabaseAbout CVE-2024-36350Published Updated

Red Hat Security Advisory: kernel security update

Affects Red HatSource GCVE Database

0
Authoritative record:CVE-2024-36350· Medium 5.6

Not known to be exploited · CVSS 5.6 Medium : upgrade to 9.7 when convenient.

Data as of 25 Oct 2026, 19:02 UTC

CVSS base score
5.6Medium
How severe the flaw is on the 0–10 CVSS scale.
EPSS
0.4% chance of exploitation in 30 days – higher than 42% of CVEsExploit Prediction Scoring System: the likelihood attackers will use this flaw soon.
Patch
Available – fixed in 9.7

Exploitation evidence

  1. Disclosed: evidence found.

    CVE published 8 Jul 2025

  2. Detectable: no evidence on record.

    No public nuclei template indexed

  3. Weaponised: no evidence on record.

    No public exploit code indexed in Metasploit or Exploit-DB

  4. Exploited in the wild: no evidence on record.

    Not in CISA KEV and no source reports exploitation

  5. Observed by OffSeq Mirage: no evidence on record.

    No attack traffic recorded by OffSeq Mirage sensors

A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 2026-10-25.

What to do

Upgrade Red Hat to 9.7.

Affected software

ProductAffectedFixed in
Red Hat Product Security Red HatAffected
  • >=9.6 <9.7
  • Red Hat
  • Red Hat Enterprise Linux
  • Red Hat Enterprise Linux AppStream (v. 9)
  • Red Hat Enterprise Linux BaseOS (v. 9)
  • Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)
Fixed in
  • 9.7

AI-suggested

A fix is available via the linux-firmware update included in Red Hat Advisory RHBA-2025:12877. Users of affected Red Hat Enterprise Linux 9 versions should apply this update following Red Hat's official guidance at https://access.redhat.com/articles/11258. No additional mitigation actions are specified or required beyond applying the update.

Description

A security update has been issued for the linux-firmware packages used in Red Hat Enterprise Linux 9. These packages contain firmware files required by various devices to operate. The update includes bug fixes and enhancements by updating linux-firmware to the latest upstream version for RHEL 9.6.z. No specific vulnerabilities or exploits are detailed in the advisory. The update is a bug fix advisory from Red Hat and applies to multiple architectures and extended support versions of RHEL 9.

References

Community reviews

Loading reviews…