CVE-2024-53104 Linux Kernel Out-of-Bounds Write
An out-of-bounds write in the Linux kernel's uvcvideo driver allows attackers to potentially execute code or escalate privileges via crafted USB video device data.
- Exploited in the wild
- Since 5 Feb 2025
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2024-53104?
CVE-2024-53104 is a high-severity memory corruption vulnerability in Debian Debian Linux, published on 2 Dec 2024. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
In the Linux kernel, the following vulnerability has been resolved:
media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
This can lead to out of bounds writes since frames of this type were not taken into account when calculating the size of the frames buffer in uvc_parse_streaming.
Weakness: CWE-787
Which versions are affected by CVE-2024-53104?
It affects 2 products.
Linux distribution packages (40)
bpftool AlmaLinux:8 | All versions | 4.18.0-553.40.1.el8_10 |
kernel AlmaLinux:8 | All versions | 4.18.0-553.40.1.el8_10 |
kernel-abi-stablelists AlmaLinux:8 | All versions | 4.18.0-553.40.1.el8_10 |
kernel-core AlmaLinux:8 | All versions | 4.18.0-553.40.1.el8_10 |
kernel-cross-headers AlmaLinux:8 | All versions | 4.18.0-553.40.1.el8_10 |
kernel-debug AlmaLinux:8 | All versions | 4.18.0-553.40.1.el8_10 |
kernel-debug-core AlmaLinux:8 | All versions | 4.18.0-553.40.1.el8_10 |
kernel-debug-devel AlmaLinux:8 | All versions | 4.18.0-553.40.1.el8_10 |
kernel-debug-modules AlmaLinux:8 | All versions | 4.18.0-553.40.1.el8_10 |
kernel-debug-modules-extra AlmaLinux:8 | All versions | 4.18.0-553.40.1.el8_10 |
kernel-devel AlmaLinux:8 | All versions | 4.18.0-553.40.1.el8_10 |
kernel-doc AlmaLinux:8 | All versions | 4.18.0-553.40.1.el8_10 |
kernel-headers AlmaLinux:8 | All versions | 4.18.0-553.40.1.el8_10 |
kernel-modules AlmaLinux:8 | All versions | 4.18.0-553.40.1.el8_10 |
kernel-modules-extra AlmaLinux:8 | All versions | 4.18.0-553.40.1.el8_10 |
kernel-rt AlmaLinux:8 | All versions | 4.18.0-553.40.1.rt7.381.el8_10 |
kernel-rt-core AlmaLinux:8 | All versions | 4.18.0-553.40.1.rt7.381.el8_10 |
kernel-rt-debug AlmaLinux:8 | All versions | 4.18.0-553.40.1.rt7.381.el8_10 |
kernel-rt-debug-core AlmaLinux:8 | All versions | 4.18.0-553.40.1.rt7.381.el8_10 |
kernel-rt-debug-devel AlmaLinux:8 | All versions | 4.18.0-553.40.1.rt7.381.el8_10 |
kernel-rt-debug-modules AlmaLinux:8 | All versions | 4.18.0-553.40.1.rt7.381.el8_10 |
kernel-rt-debug-modules-extra AlmaLinux:8 | All versions | 4.18.0-553.40.1.rt7.381.el8_10 |
kernel-rt-devel AlmaLinux:8 | All versions | 4.18.0-553.40.1.rt7.381.el8_10 |
kernel-rt-modules AlmaLinux:8 | All versions | 4.18.0-553.40.1.rt7.381.el8_10 |
kernel-rt-modules-extra AlmaLinux:8 | All versions | 4.18.0-553.40.1.rt7.381.el8_10 |
kernel-tools AlmaLinux:8 | All versions | 4.18.0-553.40.1.el8_10 |
kernel-tools-libs AlmaLinux:8 | All versions | 4.18.0-553.40.1.el8_10 |
kernel-tools-libs-devel AlmaLinux:8 | All versions | 4.18.0-553.40.1.el8_10 |
kernel-zfcpdump AlmaLinux:8 | All versions | 4.18.0-553.40.1.el8_10 |
kernel-zfcpdump-core AlmaLinux:8 | All versions | 4.18.0-553.40.1.el8_10 |
kernel-zfcpdump-devel AlmaLinux:8 | All versions | 4.18.0-553.40.1.el8_10 |
kernel-zfcpdump-modules AlmaLinux:8 | All versions | 4.18.0-553.40.1.el8_10 |
kernel-zfcpdump-modules-extra AlmaLinux:8 | All versions | 4.18.0-553.40.1.el8_10 |
perf AlmaLinux:8 | All versions | 4.18.0-553.40.1.el8_10 |
python3-perf AlmaLinux:8 | All versions | 4.18.0-553.40.1.el8_10 |
bpftool AlmaLinux:9 | All versions | 7.4.0-503.23.2.el9_5 |
kernel AlmaLinux:9 | All versions | 5.14.0-503.23.2.el9_5 |
kernel-64k AlmaLinux:9 | All versions | 5.14.0-503.23.2.el9_5 |
kernel-64k-core AlmaLinux:9 | All versions | 5.14.0-503.23.2.el9_5 |
kernel-64k-debug AlmaLinux:9 | All versions | 5.14.0-503.23.2.el9_5 |
Products include Debian Debian Linux, Linux kernel.
How do I fix CVE-2024-53104?
Apply the vendor's patch. US federal agencies must fix it by 26 Feb 2025.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2024-53104 being exploited?
Yes. Attackers have exploited CVE-2024-53104 in the wild since at least 5 Feb 2025.
Public exploit code: 1 proofs of concept on GitHub.
Other vulnerabilities in Debian Debian Linux
Sources
Also known as A-378455392, ALSA-2025:1230, ALSA-2025:1262, ALSA-2025:1266, ASB-A-378455392, BELL-CVE-2024-53104 and 35 more.