Skip to main content
CVE-2024-53104VulnerabilityPublished Updated

Red Hat Security Advisory: kernel-rt security update

Affects Linux kernelSource GCVE Database

0
Compare

Exploited in the wild · KEV due 26 Feb 2025 : apply the vendor's fix or mitigations to Linux kernel now.

Data as of 5 Nov 2026, 17:02 UTC

Exploitation

Actively exploited

High severity · No CVSS score from NVD or the CNA

KEV deadline
 US federal agencies must patch by this date; a sensible deadline for everyone else. Other KEV due dates

Exploitation evidence

t = 0 is the CVE’s publication on cve.org

  1. Disclosed: evidence found.

    CVE published 10 Feb 2025

  2. Detectable: no evidence on record.

    No public nuclei template indexed

  3. Weaponized: no evidence on record.

    No public exploit code indexed in Metasploit or Exploit-DB

  4. Exploited in the wild: evidence found.

    Listed in CISA KEV 5 days before disclosure

  5. Observed by OffSeq Mirage: no evidence on record.

    No attack traffic recorded by OffSeq Mirage sensors

Timeline

  1. , 5 days before disclosure

  2. CVE published

    on cve.org

    , t = 0

  3. KEV remediation due

    US federal deadline

    , 16 days after disclosure

A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), CISA KEV (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 5 Nov 2026.

What to do

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Description

A security vulnerability (CVE-2024-53104) exists in the kernel-rt packages of Red Hat Enterprise Linux 8 Real Time, related to the media subsystem's uvcvideo driver. The flaw involves improper parsing of frames of type UVC_VS_UNDEFINED in the uvc_parse_format function. Red Hat has issued an important security advisory with an update that addresses this issue. Systems must be rebooted after applying the update for the fix to take effect.

References

Community reviews

Loading reviews…