Red Hat Security Advisory: kernel-rt security update
Affects Linux kernelSource GCVE Database
Exploited in the wild · KEV due 26 Feb 2025 : apply the vendor's fix or mitigations to Linux kernel now.
Data as of 5 Nov 2026, 17:02 UTC
Actively exploited
High severity · No CVSS score from NVD or the CNA
- KEV deadline
- US federal agencies must patch by this date; a sensible deadline for everyone else. Other KEV due dates
Exploitation evidence
t = 0 is the CVE’s publication on cve.org
Disclosed: evidence found.
CVE published 10 Feb 2025
Detectable: no evidence on record.
No public nuclei template indexed
Weaponized: no evidence on record.
No public exploit code indexed in Metasploit or Exploit-DB
Exploited in the wildExploited: evidence found.
Listed in CISA KEV 5 days before disclosure
Observed by OffSeq MirageSeen by Mirage: no evidence on record.
No attack traffic recorded by OffSeq Mirage sensors
Timeline
Added to CISA KEV (opens in a new tab)
exploitation confirmed
, 5 days before disclosure
CVE published
on cve.org
, t = 0
KEV remediation due
US federal deadline
, 16 days after disclosure
A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), CISA KEV (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 5 Nov 2026.
What to do
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Description
A security vulnerability (CVE-2024-53104) exists in the kernel-rt packages of Red Hat Enterprise Linux 8 Real Time, related to the media subsystem's uvcvideo driver. The flaw involves improper parsing of frames of type UVC_VS_UNDEFINED in the uvc_parse_format function. Red Hat has issued an important security advisory with an update that addresses this issue. Systems must be rebooted after applying the update for the fix to take effect.