Live › vulnerability › CVE-2024-53104
Go to dashboardThe Linux kernel's USB Video Class driver has an out-of-bounds write in uvc_parse_streaming. A person with physical access to the machine can plug in a crafted USB camera device to escalate privileges.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 19:11 UTC, 3h before NVD. All times on this page are UTC.
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| debian linux | vendor | = 11.0 | – |
| linux kernel | vendor | >= 2.6.26, < 4.19.324 | 4.19.324 |
| linux kernel | vendor | >= 4.20, < 5.4.286 | 5.4.286 |
| linux kernel | vendor | >= 5.5, < 5.10.230 | 5.10.230 |
| linux kernel | vendor | >= 5.11, < 5.15.172 | 5.15.172 |
| linux kernel | vendor | >= 5.16, < 6.1.117 | 6.1.117 |
| linux kernel | vendor | >= 6.2, < 6.6.61 | 6.6.61 |
| linux kernel | vendor | >= 6.7, < 6.11.8 | 6.11.8 |
| linux kernel | vendor | >= 6.12, < 6.12.1 | 6.12.1 |
| Linux Kernel | vendor | – | – |
Unknown from the sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Linux kernel contains an out-of-bounds write vulnerability in the uvc_parse_streaming component of the USB Video Class (UVC) driver that could allow for physical escalation of privilege.
CISA required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
This page as .md · .json · in your agent: get_signal("CVE-2024-53104")
CISA KEV catalog, Creative Commons 0 · NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.