Red Hat Security Advisory: kernel security update
Affects Linux kernelSource GCVE Database
Exploited in the wild · KEV due 26 Feb 2025 · 3% EPSS : apply the vendor's fix or mitigations to Linux kernel now.
Data as of 26 Oct 2026, 12:54 UTC
Actively exploited
High severity · No CVSS score from NVD or the CNA
- KEV deadline
- US federal agencies must patch by this date; a sensible deadline for everyone else.
- EPSS
- 3.3% chance of exploitation in 30 days – higher than 88% of CVEsExploit Prediction Scoring System: the likelihood attackers will use this flaw soon.
Exploitation evidence
t = 0 is the CVE’s publication on cve.org
Disclosed: evidence found.
CVE published 12 Feb 2025
Detectable: no evidence on record.
No public nuclei template indexed
Weaponised: no evidence on record.
No public exploit code indexed in Metasploit or Exploit-DB
Exploited in the wildExploited: evidence found.
Listed in CISA KEV 7 days before disclosure
Observed by OffSeq MirageSeen by Mirage: no evidence on record.
No attack traffic recorded by OffSeq Mirage sensors
Timeline
Added to CISA KEV (opens in a new tab)
exploitation confirmed
, 7 days before disclosure
CVE published
on cve.org
, t = 0
KEV remediation due
US federal deadline
, 14 days after disclosure
A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), CISA KEV (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 26 Oct 2026.
What to do
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Description
The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (CVE-2024-53104) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.