Описание
Security update for the Linux Kernel (Live Patch 48 for SLE 15 SP3)
This update for the Linux Kernel 5.3.18-150300_59_174 fixes one issue.
The following security issue was fixed:
- CVE-2024-53104: media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (bsc#1236783).
Список пакетов
SUSE Linux Enterprise Live Patching 15 SP3
kernel-livepatch-5_3_18-150300_59_174-default-5-150300.2.1
Ссылки
- Link for SUSE-SU-2025:0707-1
- E-Mail link for SUSE-SU-2025:0707-1
- SUSE Security Ratings
- SUSE Bug 1236783
- SUSE CVE CVE-2024-53104 page
Описание
In the Linux kernel, the following vulnerability has been resolved: media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format This can lead to out of bounds writes since frames of this type were not taken into account when calculating the size of the frames buffer in uvc_parse_streaming.
Затронутые продукты
SUSE Linux Enterprise Live Patching 15 SP3:kernel-livepatch-5_3_18-150300_59_174-default-5-150300.2.1
Ссылки
- CVE-2024-53104
- SUSE Bug 1234025
- SUSE Bug 1236783