CVE-2024-53104

media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format

CVSS 7.8 HIGHEPSS 3.3%● KEVCWE-787

In short

A flaw in the Linux kernel's USB video driver fails to properly handle certain undefined frame types, which can cause the driver to write data outside allocated memory boundaries. This can crash the system or potentially allow unauthorized code execution when a malicious USB device is connected.

Technical detail

CWE-787 out-of-bounds write vulnerability in uvc_parse_format() where UVC_VS_UNDEFINED frame types are parsed but not accounted for in buffer size calculation in uvc_parse_streaming(). Attack vector requires physical connection of a crafted USB video device; impact includes memory corruption and potential code execution in kernel context.

Summary generated and translated by AI from the official description.

In the Linux kernel, the following vulnerability has been resolved: media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format This can lead to out of bounds writes since frames of this type were not taken into account when calculating the size of the frames buffer in uvc_parse_streaming.

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

Linux · Linux

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References