Red Hat Security Advisory: kernel-rt security update
The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fix(es): * kernel: media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (CVE-2024-53104) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
AI Analysis
Technical Summary
CVE-2024-53104 is a vulnerability in the Linux kernel's uvcvideo driver where frames of type UVC_VS_UNDEFINED are parsed incorrectly in the uvc_parse_format function. This flaw is addressed by skipping the parsing of such frames. Red Hat has released security updates for the kernel-rt packages in Red Hat Enterprise Linux 8, including Real Time, NFV, RT, and Extended Life Cycle variants. The advisories classify the update as important, and the fix involves applying the updated kernel-rt packages and rebooting the system.
Potential Impact
The vulnerability affects the kernel-rt packages in Red Hat Enterprise Linux 8 and its variants, potentially impacting systems using the Real Time Linux Kernel. The security impact is rated as important by Red Hat Product Security. No known exploits in the wild have been reported. The vulnerability could lead to issues related to improper handling of undefined video frames in the kernel media subsystem, but specific exploitation impact details are not provided in the advisory.
Mitigation Recommendations
Red Hat has released updated kernel-rt packages that fix this vulnerability by skipping the parsing of frames of type UVC_VS_UNDEFINED. Users should apply the security update as described in the Red Hat advisory (RHSA-2025:1230 and RHSA-2025:1231) and reboot affected systems to ensure the patch takes effect. For detailed update instructions, refer to https://access.redhat.com/articles/11258. No additional mitigation steps are indicated by the vendor.
Red Hat Security Advisory: kernel-rt security update
Description
The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fix(es): * kernel: media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (CVE-2024-53104) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected software
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
CVE-2024-53104 is a vulnerability in the Linux kernel's uvcvideo driver where frames of type UVC_VS_UNDEFINED are parsed incorrectly in the uvc_parse_format function. This flaw is addressed by skipping the parsing of such frames. Red Hat has released security updates for the kernel-rt packages in Red Hat Enterprise Linux 8, including Real Time, NFV, RT, and Extended Life Cycle variants. The advisories classify the update as important, and the fix involves applying the updated kernel-rt packages and rebooting the system.
Potential Impact
The vulnerability affects the kernel-rt packages in Red Hat Enterprise Linux 8 and its variants, potentially impacting systems using the Real Time Linux Kernel. The security impact is rated as important by Red Hat Product Security. No known exploits in the wild have been reported. The vulnerability could lead to issues related to improper handling of undefined video frames in the kernel media subsystem, but specific exploitation impact details are not provided in the advisory.
Mitigation Recommendations
Red Hat has released updated kernel-rt packages that fix this vulnerability by skipping the parsing of frames of type UVC_VS_UNDEFINED. Users should apply the security update as described in the Red Hat advisory (RHSA-2025:1230 and RHSA-2025:1231) and reboot affected systems to ensure the patch takes effect. For detailed update instructions, refer to https://access.redhat.com/articles/11258. No additional mitigation steps are indicated by the vendor.
Technical Details
- Gcve Source
- db.gcve.eu
- Csaf Category
- csaf_security_advisory
- Csaf Version
- 2.0
- Publisher
- Red Hat Product Security
- Advisory Id
- RHSA-2025:1347
- Cve Count
- 1
Threat ID: 6a3da1e54853345fc182dda4
Added to database: 06/25/2026, 21:47:17 UTC
Last enriched: 08/11/2026, 20:13:49 UTC
Last updated: 09/10/2026, 19:36:49 UTC
Views: 27
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
External Links
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.