CVE-2024-53104
Description
In the Linux kernel, the following vulnerability has been resolved:
media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
This can lead to out of bounds writes since frames of this type were not
taken into account when calculating the size of the frames buffer in
uvc_parse_streaming.
Summary dbcve.org
The Linux kernel's uvcvideo driver has an out-of-bounds write vulnerability in the video format parsing code. When calculating buffer sizes in uvc_parse_streaming, frames of type UVC_VS_UNDEFINED were not accounted for. Subsequently, when uvc_parse_format attempts to parse these undefined frame types, it writes beyond the allocated buffer boundary.
Mitigation
Apply the kernel patch to skip parsing UVC_VS_UNDEFINED frame types, or update to a kernel version containing this fix. No practical workaround exists aside from not using UVC video devices.