What is CVE-2024-53104?

CVE-2024-53104 is a High severity Linux kernel vulnerability with a CVSS score of 7.8 out of 10, classified as a Out-of-bounds Write flaw (CWE-787), affecting Linux kernel versions from 2.6.26 onward and patched in 4.19.324, 5.4.286, 5.10.230 and others. CVE-2024-53104 is listed in the CISA Known Exploited Vulnerabilities (KEV) catalog, confirming active exploitation in the wild.

What is the CVSS score for CVE-2024-53104?

CVE-2024-53104 has a CVSS score of 7.8 out of 10, rated High severity. The vector string is CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.

Is there a patch available for CVE-2024-53104?

Yes, CVE-2024-53104 has been patched. Fixed versions include 4.19.324, 5.4.286, 5.10.230 and others. If you are running Linux kernel 2.6.26 or later up to the fix versions, apply the relevant patch for your kernel branch.

Is CVE-2024-53104 actively exploited?

Yes. CVE-2024-53104 is listed in the CISA Known Exploited Vulnerabilities (KEV) catalog, confirming active exploitation in the wild with a CVSS score of 7.8 (High severity).

What is Out-of-bounds Write (CWE-787)?

The product writes data past the end or before the beginning of the intended buffer. See MITRE CWE for full details: https://cwe.mitre.org/data/definitions/787.html

CVE-2024-53104

High KEV — Actively Exploited

In the Linux kernel, the following vulnerability has been resolved: media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format This can lead to out of bounds writes since frames of this type were not taken into account when calculating the size of the frames buffer in uvc_parse_streaming.

Package Linux Kernel

Published 2024-12-02

Last modified 2025-11-04

CVSS version 3.1

Patch available

Yes

CVSS 3.1 score

7.8

out of 10

High

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Vector string

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness type

CWE-787

CVE-2024-53104 is a Out-of-bounds Write vulnerability

What is Out-of-bounds Write?

The product writes data past the end or before the beginning of the intended buffer. Learn more on MITRE CWE

Affected versions

Linux kernel versions 2.6.26 and later are affected. Fixed in 4.19.324, 5.4.286, 5.10.230, 5.15.172, 6.1.117, 6.6.61, 6.11.8, 6.12.1, 6.13 and their respective stable series.

Affected from

≥ 2.6.26

Fixed in

✓ 4.19.324 4.19.x ✓ 5.4.286 5.4.x ✓ 5.10.230 5.10.x ✓ 5.15.172 5.15.x ✓ 6.1.117 6.1.x ✓ 6.6.61 6.6.x ✓ 6.11.8 6.11.x ✓ 6.12.1 6.12.x ✓ 6.13

References

12 total

CISA
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-53104

US Government Resource
Kernel Git
https://git.kernel.org/stable/c/1ee9d9122801eb688783acd07791f2906b87cb4f

Patch
Kernel Git
https://git.kernel.org/stable/c/467d84dc78c9abf6b217ada22b3fdba336262e29

Patch
Kernel Git
https://git.kernel.org/stable/c/575a562f7a3ec2d54ff77ab6810e3fbceef2a91d

Patch
Kernel Git
https://git.kernel.org/stable/c/622ad10aae5f5e03b7927ea95f7f32812f692bb5

Patch

Showing 5 of 12 references View all on NVD

Details

CVE ID CVE-2024-53104

Severity High

CVSS score 7.8 / 10

CVSS version 3.1

Published 2024-12-02

Modified 2025-11-04

KEV Yes

Patch

Yes

Package linux

Frequently asked questions

What is CVE-2024-53104?

CVE-2024-53104 is a High severity Linux kernel vulnerability with a CVSS score of 7.8 out of 10 , classified as an Out-of-bounds Write flaw (CWE-787) . It affects Linux kernel versions from 2.6.26 onward and has been patched in 4.19.324, 5.4.286, 5.10.230 and others. CVE-2024-53104 is listed in the CISA Known Exploited Vulnerabilities (KEV) catalog, confirming active exploitation in the wild.
What is the CVSS score for CVE-2024-53104?

CVE-2024-53104 has a CVSS score of 7.8 out of 10, rated High severity (CVSS 3.1). The vector string is CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.
Is there a patch available for CVE-2024-53104?

Yes. CVE-2024-53104 has been patched. Fixed versions include 4.19.324, 5.4.286, 5.10.230 and others. If you are running Linux kernel 2.6.26 or later up to the fix versions, apply the relevant patch for your kernel branch.
Is CVE-2024-53104 actively exploited?

Yes. CVE-2024-53104 is listed in the CISA Known Exploited Vulnerabilities (KEV) catalog, confirming active exploitation in the wild. It carries a CVSS score of 7.8 (High severity).