Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

rocky логотип

RLSA-2025:1266

Опубликовано: 26 фев. 2025
Источник: rocky
Оценка: Important

Описание

Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

  • kernel: media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (CVE-2024-53104)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Затронутые продукты

  • Rocky Linux 8

НаименованиеАрхитектураРелизRPM
bpftoolx86_64553.40.1.el8_10bpftool-4.18.0-553.40.1.el8_10.x86_64.rpm
kernelx86_64553.40.1.el8_10kernel-4.18.0-553.40.1.el8_10.x86_64.rpm
kernel-abi-stablelistsnoarch553.40.1.el8_10kernel-abi-stablelists-4.18.0-553.40.1.el8_10.noarch.rpm
kernel-corex86_64553.40.1.el8_10kernel-core-4.18.0-553.40.1.el8_10.x86_64.rpm
kernel-cross-headersx86_64553.40.1.el8_10kernel-cross-headers-4.18.0-553.40.1.el8_10.x86_64.rpm
kernel-debugx86_64553.40.1.el8_10kernel-debug-4.18.0-553.40.1.el8_10.x86_64.rpm
kernel-debug-corex86_64553.40.1.el8_10kernel-debug-core-4.18.0-553.40.1.el8_10.x86_64.rpm
kernel-debug-develx86_64553.40.1.el8_10kernel-debug-devel-4.18.0-553.40.1.el8_10.x86_64.rpm
kernel-debuginfo-common-x86_64x86_64553.40.1.el8_10kernel-debuginfo-common-x86_64-4.18.0-553.40.1.el8_10.x86_64.rpm
kernel-debug-modulesx86_64553.40.1.el8_10kernel-debug-modules-4.18.0-553.40.1.el8_10.x86_64.rpm

Показывать по

Связанные CVE

Исправления

Связанные уязвимости

CVSS3: 7.8
ubuntu
7 месяцев назад

In the Linux kernel, the following vulnerability has been resolved: media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format This can lead to out of bounds writes since frames of this type were not taken into account when calculating the size of the frames buffer in uvc_parse_streaming.

CVSS3: 7.3
redhat
7 месяцев назад

In the Linux kernel, the following vulnerability has been resolved: media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format This can lead to out of bounds writes since frames of this type were not taken into account when calculating the size of the frames buffer in uvc_parse_streaming.

CVSS3: 7.8
nvd
7 месяцев назад

In the Linux kernel, the following vulnerability has been resolved: media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format This can lead to out of bounds writes since frames of this type were not taken into account when calculating the size of the frames buffer in uvc_parse_streaming.

CVSS3: 7.8
debian
7 месяцев назад

In the Linux kernel, the following vulnerability has been resolved: m ...

suse-cvrf
4 месяца назад

Security update for the Linux Kernel (Live Patch 34 for SLE 15 SP4)