Skip to content
OpenAdvisories
High 1 exploited CVE ELSA-2025-1281 1 CVE

Important: kernel security update (Oracle Linux 7)

Published Mar 13, 2025 · Updated Mar 13, 2025

Ecosystem: Oracle Linux

Summary

[3.10.0-1160.119.1.0.6.el7.OL7]
- media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (Benoit Sevens) {CVE-2024-53104} [Orabug: 37584712]

Fixed packages 13

ReleasePackageFixed in
Oracle Linux · 7 bpftool 0:3.10.0-1160.119.1.0.6.el7
Oracle Linux · 7 kernel 0:3.10.0-1160.119.1.0.6.el7
Oracle Linux · 7 kernel-abi-whitelists 0:3.10.0-1160.119.1.0.6.el7
Oracle Linux · 7 kernel-debug 0:3.10.0-1160.119.1.0.6.el7
Oracle Linux · 7 kernel-debug-devel 0:3.10.0-1160.119.1.0.6.el7
Oracle Linux · 7 kernel-devel 0:3.10.0-1160.119.1.0.6.el7
Oracle Linux · 7 kernel-doc 0:3.10.0-1160.119.1.0.6.el7
Oracle Linux · 7 kernel-headers 0:3.10.0-1160.119.1.0.6.el7
Oracle Linux · 7 kernel-tools 0:3.10.0-1160.119.1.0.6.el7
Oracle Linux · 7 kernel-tools-libs 0:3.10.0-1160.119.1.0.6.el7
Oracle Linux · 7 kernel-tools-libs-devel 0:3.10.0-1160.119.1.0.6.el7
Oracle Linux · 7 perf 0:3.10.0-1160.119.1.0.6.el7
Oracle Linux · 7 python-perf 0:3.10.0-1160.119.1.0.6.el7

Vulnerabilities 1

  • High 7.8
    CVE-2024-53104 Exploited Public exploit

    media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format

    In the Linux kernel, the following vulnerability has been resolved: media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format This can lead to out of bounds writes since frames of this type were not taken into account when calculating …

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
    KEV Feb 5, 2025