{"schema":"threatline.record/2","record":{"id":"CVE-2024-53104","aliases":[],"summary":"Linux Kernel Out-of-Bounds Write Vulnerability","details":"Linux kernel contains an out-of-bounds write vulnerability in the uvc_parse_streaming component of the USB Video Class (UVC) driver that could allow for physical escalation of privilege.","categories":["Operating systems"],"product":"Kernel","vendor":"Linux","ecosystem":null,"affected_ranges":[{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2024-53104","source_modified_at":"2026-05-11T20:50:54.836Z","fetched_at":"2026-10-23T18:42:43.628194Z","product":"Linux","vendor":"Linux","versions":[{"version":"c0efd232929c2cd87238de2cccdaf4e845be5b0c","lessThan":"95edf13a48e75dc2cc5b0bc57bf90d6948a22fe8","status":"affected","versionType":"git"},{"version":"c0efd232929c2cd87238de2cccdaf4e845be5b0c","lessThan":"684022f81f128338fe3587ec967459669a1204ae","status":"affected","versionType":"git"},{"version":"c0efd232929c2cd87238de2cccdaf4e845be5b0c","lessThan":"faff5bbb2762c44ec7426037b3000e77a11d6773","status":"affected","versionType":"git"},{"version":"c0efd232929c2cd87238de2cccdaf4e845be5b0c","lessThan":"467d84dc78c9abf6b217ada22b3fdba336262e29","status":"affected","versionType":"git"},{"version":"c0efd232929c2cd87238de2cccdaf4e845be5b0c","lessThan":"beced2cb09b58c1243733f374c560a55382003d6","status":"affected","versionType":"git"},{"version":"c0efd232929c2cd87238de2cccdaf4e845be5b0c","lessThan":"575a562f7a3ec2d54ff77ab6810e3fbceef2a91d","status":"affected","versionType":"git"},{"version":"c0efd232929c2cd87238de2cccdaf4e845be5b0c","lessThan":"622ad10aae5f5e03b7927ea95f7f32812f692bb5","status":"affected","versionType":"git"},{"version":"c0efd232929c2cd87238de2cccdaf4e845be5b0c","lessThan":"1ee9d9122801eb688783acd07791f2906b87cb4f","status":"affected","versionType":"git"},{"version":"c0efd232929c2cd87238de2cccdaf4e845be5b0c","lessThan":"ecf2b43018da9579842c774b7f35dbe11b5c38dd","status":"affected","versionType":"git"}],"defaultStatus":"unaffected"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2024-53104","source_modified_at":"2026-05-11T20:50:54.836Z","fetched_at":"2026-10-23T18:42:43.628194Z","product":"Linux","vendor":"Linux","versions":[{"version":"2.6.26","status":"affected"},{"version":"0","lessThan":"2.6.26","status":"unaffected","versionType":"semver"},{"version":"4.19.324","lessThanOrEqual":"4.19.*","status":"unaffected","versionType":"semver"},{"version":"5.4.286","lessThanOrEqual":"5.4.*","status":"unaffected","versionType":"semver"},{"version":"5.10.230","lessThanOrEqual":"5.10.*","status":"unaffected","versionType":"semver"},{"version":"5.15.172","lessThanOrEqual":"5.15.*","status":"unaffected","versionType":"semver"},{"version":"6.1.117","lessThanOrEqual":"6.1.*","status":"unaffected","versionType":"semver"},{"version":"6.6.61","lessThanOrEqual":"6.6.*","status":"unaffected","versionType":"semver"},{"version":"6.11.8","lessThanOrEqual":"6.11.*","status":"unaffected","versionType":"semver"},{"version":"6.12.1","lessThanOrEqual":"6.12.*","status":"unaffected","versionType":"semver"},{"version":"6.13","lessThanOrEqual":"*","status":"unaffected","versionType":"original_commit_for_fix"}],"defaultStatus":"affected"}],"fixed_versions":[{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2024-53104","source_modified_at":"2026-05-11T20:50:54.836Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"name":"Linux","ecosystem":null},"version":"95edf13a48e75dc2cc5b0bc57bf90d6948a22fe8","basis":"first unaffected version stated in the CVE record"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2024-53104","source_modified_at":"2026-05-11T20:50:54.836Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"name":"Linux","ecosystem":null},"version":"684022f81f128338fe3587ec967459669a1204ae","basis":"first unaffected version stated in the CVE record"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2024-53104","source_modified_at":"2026-05-11T20:50:54.836Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"name":"Linux","ecosystem":null},"version":"467d84dc78c9abf6b217ada22b3fdba336262e29","basis":"first unaffected version stated in the CVE record"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2024-53104","source_modified_at":"2026-05-11T20:50:54.836Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"name":"Linux","ecosystem":null},"version":"575a562f7a3ec2d54ff77ab6810e3fbceef2a91d","basis":"first unaffected version stated in the CVE record"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2024-53104","source_modified_at":"2026-05-11T20:50:54.836Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"name":"Linux","ecosystem":null},"version":"622ad10aae5f5e03b7927ea95f7f32812f692bb5","basis":"first unaffected version stated in the CVE record"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2024-53104","source_modified_at":"2026-05-11T20:50:54.836Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"name":"Linux","ecosystem":null},"version":"1ee9d9122801eb688783acd07791f2906b87cb4f","basis":"first unaffected version stated in the CVE record"}],"cvss":7.8,"severity":"High","kev":{"listed":true,"date_added":"2025-02-05","due_date":"2025-02-26","required_action":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","ransomware_campaign_use":"Unknown"},"epss":{"probability":0.03395,"percentile":0.88769,"score_date":"2026-10-23"},"published_at":"2024-12-02T07:29:27.261Z","modified_at":"2026-05-11T20:50:54.836Z","provenance":[{"source":"CISA KEV","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":"2026-10-23T17:00:09.9001Z"},{"source":"CVE List","url":"https://www.cve.org/CVERecord?id=CVE-2024-53104","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":"2026-05-11T20:50:54.836Z"},{"source":"EPSS","url":"https://api.first.org/data/v1/epss?cve=CVE-2024-53104","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":"2026-10-23"}],"sources":["CISA KEV","CVE List","EPSS"],"references":[{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-53104","source":"CISA KEV"},{"source":"CVE List","url":"https://git.kernel.org/stable/c/95edf13a48e75dc2cc5b0bc57bf90d6948a22fe8"},{"source":"CVE List","url":"https://git.kernel.org/stable/c/684022f81f128338fe3587ec967459669a1204ae"},{"source":"CVE List","url":"https://git.kernel.org/stable/c/faff5bbb2762c44ec7426037b3000e77a11d6773"},{"source":"CVE List","url":"https://git.kernel.org/stable/c/467d84dc78c9abf6b217ada22b3fdba336262e29"},{"source":"CVE List","url":"https://git.kernel.org/stable/c/beced2cb09b58c1243733f374c560a55382003d6"},{"source":"CVE List","url":"https://git.kernel.org/stable/c/575a562f7a3ec2d54ff77ab6810e3fbceef2a91d"},{"source":"CVE List","url":"https://git.kernel.org/stable/c/622ad10aae5f5e03b7927ea95f7f32812f692bb5"},{"source":"CVE List","url":"https://git.kernel.org/stable/c/1ee9d9122801eb688783acd07791f2906b87cb4f"},{"source":"CVE List","url":"https://git.kernel.org/stable/c/ecf2b43018da9579842c774b7f35dbe11b5c38dd"},{"source":"CVE List","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-53104","tags":["government-resource"]},{"source":"CVE List","url":"https://lists.debian.org/debian-lts-announce/2025/03/msg00002.html"},{"source":"CVE List","url":"https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html"}],"locations":[],"motoko_assessment":{"status":"requires_architecture_review","automatic_remediation":false},"cve_state":"PUBLISHED","cvss_source":"CISA ADP","ssvc":{"exploitation":"active","automatable":"no","technical_impact":"total","assessed_at":"2025-04-21T13:29:32.093245Z"},"classification":{"method":"product-first software-layer rules","rules_version":"2.1","matched_on":"vendor and product","confidence":"heuristic","reviewed":false},"change_timestamp":"2026-05-11T20:50:54.836Z","content_hash":"3b46aaee6d0314f0c3b1fa83400cc3bfc495803e3e5ee7f9f23804dae2cf8e6d"}}