Red Hat Security Advisory: kernel security update
Affects Linux kernelSource GCVE Database
Exploited in the wild · KEV due 26 Feb 2025 : upgrade Linux kernel to 3.10.0-1062.92.1.el7 now.
Data as of 5 Nov 2026, 17:03 UTC
Actively exploited
High severity · No CVSS score from NVD or the CNA
- KEV deadline
- US federal agencies must patch by this date; a sensible deadline for everyone else. Other KEV due dates
- Patch
- Available – fixed in 3.10.0-1062.92.1.el7
Exploitation evidence
t = 0 is the CVE’s publication on cve.org
Disclosed: evidence found.
CVE published 11 Feb 2025
Detectable: no evidence on record.
No public nuclei template indexed
Weaponized: no evidence on record.
No public exploit code indexed in Metasploit or Exploit-DB
Exploited in the wildExploited: evidence found.
Listed in CISA KEV 6 days before disclosure
Observed by OffSeq MirageSeen by Mirage: no evidence on record.
No attack traffic recorded by OffSeq Mirage sensors
Timeline
Added to CISA KEV (opens in a new tab)
exploitation confirmed
, 6 days before disclosure
CVE published
on cve.org
, t = 0
KEV remediation due
US federal deadline
, 15 days after disclosure
A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), CISA KEV (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 5 Nov 2026.
What to do
Upgrade Linux kernel to 3.10.0-1062.92.1.el7.
Affected software
| Product | Affected | Fixed in |
|---|---|---|
| Red Hat Product Security Red Hat | Affected
| Fixed in
|
Description
A security vulnerability (CVE-2024-53104) in the Linux kernel's media subsystem (uvcvideo driver) allows improper parsing of frames of type UVC_VS_UNDEFINED. This issue is addressed by skipping the parsing of such frames in the uvc_parse_format function. Red Hat has released a kernel update for Red Hat Enterprise Linux 7.7 to fix this vulnerability. The update requires a system reboot to take effect.