Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

oracle-oval логотип

ELSA-2025-1281

Опубликовано: 13 мар. 2025
Источник: oracle-oval
Платформа: Oracle Linux 7

Описание

ELSA-2025-1281: kernel security update (IMPORTANT)

[3.10.0-1160.119.1.0.6.el7.OL7]

  • media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (Benoit Sevens) {CVE-2024-53104} [Orabug: 37584712]

Обновленные пакеты

Oracle Linux 7

Oracle Linux x86_64

bpftool

3.10.0-1160.119.1.0.6.el7

kernel

3.10.0-1160.119.1.0.6.el7

kernel-abi-whitelists

3.10.0-1160.119.1.0.6.el7

kernel-debug

3.10.0-1160.119.1.0.6.el7

kernel-debug-devel

3.10.0-1160.119.1.0.6.el7

kernel-devel

3.10.0-1160.119.1.0.6.el7

kernel-doc

3.10.0-1160.119.1.0.6.el7

kernel-headers

3.10.0-1160.119.1.0.6.el7

kernel-tools

3.10.0-1160.119.1.0.6.el7

kernel-tools-libs

3.10.0-1160.119.1.0.6.el7

kernel-tools-libs-devel

3.10.0-1160.119.1.0.6.el7

perf

3.10.0-1160.119.1.0.6.el7

python-perf

3.10.0-1160.119.1.0.6.el7

Связанные CVE

Связанные уязвимости

CVSS3: 7.8
ubuntu
7 месяцев назад

In the Linux kernel, the following vulnerability has been resolved: media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format This can lead to out of bounds writes since frames of this type were not taken into account when calculating the size of the frames buffer in uvc_parse_streaming.

CVSS3: 7.3
redhat
7 месяцев назад

In the Linux kernel, the following vulnerability has been resolved: media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format This can lead to out of bounds writes since frames of this type were not taken into account when calculating the size of the frames buffer in uvc_parse_streaming.

CVSS3: 7.8
nvd
7 месяцев назад

In the Linux kernel, the following vulnerability has been resolved: media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format This can lead to out of bounds writes since frames of this type were not taken into account when calculating the size of the frames buffer in uvc_parse_streaming.

CVSS3: 7.8
debian
7 месяцев назад

In the Linux kernel, the following vulnerability has been resolved: m ...

suse-cvrf
4 месяца назад

Security update for the Linux Kernel (Live Patch 34 for SLE 15 SP4)