CVE-2024-53104

HighCVSS 7.8/10Known exploited (CISA KEV)Last modified Jun 17, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format

This can lead to out of bounds writes since frames of this type were not taken into account when calculating the size of the frames buffer in uvc_parse_streaming.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-787

Affected software

VendorProductVersions
LinuxLinux>= c0efd232929c2cd87238de2cccdaf4e845be5b0c, < 95edf13a48e75dc2cc5b0bc57bf90d6948a22fe8; >= c0efd232929c2cd87238de2cccdaf4e845be5b0c, < 684022f81f128338fe3587ec967459669a1204ae; >= c0efd232929c2cd87238de2cccdaf4e845be5b0c, < faff5bbb2762c44ec7426037b3000e77a11d6773; >= c0efd232929c2cd87238de2cccdaf4e845be5b0c, < 467d84dc78c9abf6b217ada22b3fdba336262e29; >= c0efd232929c2cd87238de2cccdaf4e845be5b0c, < beced2cb09b58c1243733f374c560a55382003d6; >= c0efd232929c2cd87238de2cccdaf4e845be5b0c, < 575a562f7a3ec2d54ff77ab6810e3fbceef2a91d; >= c0efd232929c2cd87238de2cccdaf4e845be5b0c, < 622ad10aae5f5e03b7927ea95f7f32812f692bb5; >= c0efd232929c2cd87238de2cccdaf4e845be5b0c, < 1ee9d9122801eb688783acd07791f2906b87cb4f; >= c0efd232929c2cd87238de2cccdaf4e845be5b0c, < ecf2b43018da9579842c774b7f35dbe11b5c38dd
LinuxLinux2.6.26

References

Timeline

Published
Dec 2, 2024
Last modified
Jun 17, 2026
Added to CISA KEV
Feb 5, 2025
NVD status
Analyzed

Related CVEs from 2024

CVE-2024-531055.5In the Linux kernel, the following vulnerability has been resolved: mm: page_alloc: move mlocked flag clearance into free_pages_prepare() CVE-2024-531067.8In the Linux kernel, the following vulnerability has been resolved: ima: fix buffer overrun in ima_eventdigest_init_common Function ima_evCVE-2024-531075.5In the Linux kernel, the following vulnerability has been resolved: fs/proc/task_mmu: prevent integer overflow in pagemap_scan_get_args() CVE-2024-531087.1In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Adjust VSDB parser for replay feature At some point, CVE-2024-531095.5In the Linux kernel, the following vulnerability has been resolved: nommu: pass NULL argument to vma_iter_prealloc() When deleting a vma eCVE-2024-53119.8DigiWin EasyFlow .NET lacks validation for certain input parameters. An unauthenticated remote attacker can inject arbitrary SQL commands toCVE-2024-531105.5In the Linux kernel, the following vulnerability has been resolved: vp_vdpa: fix id_table array not null terminated error Allocate one extCVE-2024-531115.5In the Linux kernel, the following vulnerability has been resolved: mm/mremap: fix address wraparound in move_page_tables() On 32-bit platCVE-2024-531125.5In the Linux kernel, the following vulnerability has been resolved: ocfs2: uncache inode which has failed entering the group Syzbot has reCVE-2024-531135.5In the Linux kernel, the following vulnerability has been resolved: mm: fix NULL pointer dereference in alloc_pages_bulk_noprof We triggerCVE-2024-531145.5In the Linux kernel, the following vulnerability has been resolved: x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 client A number oCVE-2024-531155.5In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: avoid null_ptr_deref in vmw_framebuffer_surface_create_hand
CVE-2024-53104: High severity, CVSS 7.8 | Vulnix