Answer in brief
CVE-2024-53063 records a High severity (CVSS 7.8) vulnerability in media: dvbdev: prevent the risk of out of memory access. The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
CVSS is 7.8. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
| Product | Affected versions | Fixed versions |
|---|---|---|
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | Not reported | Not reported |
| cpe:2.3:o:linux:linux_kernel:6.12:rc1:*:*:*:*:*:* | Not reported | Not reported |
| cpe:2.3:o:linux:linux_kernel:6.12:rc2:*:*:*:*:*:* | Not reported | Not reported |
| cpe:2.3:o:linux:linux_kernel:6.12:rc3:*:*:*:*:*:* | Not reported | Not reported |
| cpe:2.3:o:linux:linux_kernel:6.12:rc4:*:*:*:*:*:* | Not reported | Not reported |
| cpe:2.3:o:linux:linux_kernel:6.12:rc5:*:*:*:*:*:* | Not reported | Not reported |
| cpe:2.3:o:linux:linux_kernel:6.12:rc6:*:*:*:*:*:* | Not reported | Not reported |
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=5dd3f3071070f5a306bdf8d474c80062f5691cba <fedfde9deb83ac8d2f3d5f36f111023df34b1684 || >=5dd3f3071070f5a306bdf8d474c80062f5691cba <3b88675e18b6517043a6f734eaa8ea6eb3bfa140 || >=5dd3f3071070f5a306bdf8d474c80062f5691cba <a4a17210c03ade1c8d9a9f193a105654b7a05c11 || >=5dd3f3071070f5a306bdf8d474c80062f5691cba <5f76f7df14861e3a560898fa41979ec92424b58f || >=5dd3f3071070f5a306bdf8d474c80062f5691cba <b751a96025275c17f04083cbfe856822f1658946 || >=5dd3f3071070f5a306bdf8d474c80062f5691cba <1e461672616b726f29261ee81bb991528818537c || >=5dd3f3071070f5a306bdf8d474c80062f5691cba <9c17085fabbde2041c893d29599800f2d4992b23 || >=5dd3f3071070f5a306bdf8d474c80062f5691cba <972e63e895abbe8aa1ccbdbb4e6362abda7cd457 | fedfde9deb83ac8d2f3d5f36f111023df34b1684, 3b88675e18b6517043a6f734eaa8ea6eb3bfa140, a4a17210c03ade1c8d9a9f193a105654b7a05c11, 5f76f7df14861e3a560898fa41979ec92424b58f, b751a96025275c17f04083cbfe856822f1658946, 1e461672616b726f29261ee81bb991528818537c, 9c17085fabbde2041c893d29599800f2d4992b23, 972e63e895abbe8aa1ccbdbb4e6362abda7cd457 |
| Linux/Linuxgeneric | 2.6.29 | Not reported |
Published upstream
Nov 19, 2024
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Sep 18, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Aug 5, 2026
In the Linux kernel, the following vulnerability has been resolved: media: dvbdev: prevent the risk of out of memory access The dvbdev contains a static variable used to store dvb minors. The behavior of it depends if CONFIG_DVB_DYNAMIC_MINORS is set or not. When not set, dvb_register_device() won't check for boundaries, as it will rely that a previous call to dvb_register_adapter() would already be enforcing it. On a similar way, dvb_device_open() uses the assumption that the register functions already did the needed checks. This can be fragile if some device ends using different calls. This also generate warnings on static check analysers like Coverity. So, add explicit guards to prevent potential risk of OOM issues.
Quoted source text, attributed separately from HOL analysis.