# vfio/pci: Properly hide first-in-list PCIe extended capability

CVE record · `CVE-2024-53214`

- **Identifiers:** `CVE-2024-53214`
- **State:** Confirmed
- **Severity:** CVSS 7.8 High
- **Critical:** No
- **CNA:** Linux
- **Weakness (CWE):** [CWE-129](https://cwe.mitre.org/data/definitions/129.html)
- **Tags:** [CWE-129](https://agentprime.io/advisories/tag/cwe-129.md)
- **Technologies:** [Linux kernel](https://agentprime.io/advisories/technology/linux-kernel.md)
- **Published:** 27 Dec 2024
- **Updated:** 5 Aug 2026
- **Reviewed by a person:** No

Published by the CVE Program (CNA: Linux) at 27 Dec 2024, 13:49 UTC. agentprime has not analysed this yet, so whether it affects any app is not known. This CVE names a vendor and product rather than a package, so the lockfile check doesn’t match it.

## Affected products, as the CNA wrote them

- Vendor: Linux. Product: Linux.
  - affected: `89e1f7d4c66d85f42c3d52ea3866eb10cadf6153 to before 4464e5aa3aa4574063640f1082f7d7e323af8eb4` (git)
  - affected: `89e1f7d4c66d85f42c3d52ea3866eb10cadf6153 to before 7d121f66b67921fb3b95e0ea9856bfba53733e91` (git)
  - affected: `89e1f7d4c66d85f42c3d52ea3866eb10cadf6153 to before 0918f5643fc6c3f7801f4a22397d2cc09ba99207` (git)
  - affected: `89e1f7d4c66d85f42c3d52ea3866eb10cadf6153 to before 9567bd34aa3b986736c290c5bcba47e0182ac47a` (git)
  - affected: `89e1f7d4c66d85f42c3d52ea3866eb10cadf6153 to before 6c6502d944168cbd7e03a4a08ad6488f78d73485` (git)
  - affected: `89e1f7d4c66d85f42c3d52ea3866eb10cadf6153 to before 06f2fcf49854ad05a09d09e0dbee6544fff04695` (git)
  - affected: `89e1f7d4c66d85f42c3d52ea3866eb10cadf6153 to before 949bee8065a85a5c6607c624dc05b5bc17119699` (git)
  - affected: `89e1f7d4c66d85f42c3d52ea3866eb10cadf6153 to before 1ef195178fb552478eb2587df4ad3be14ef76507` (git)
  - affected: `89e1f7d4c66d85f42c3d52ea3866eb10cadf6153 to before fe4bf8d0b6716a423b16495d55b35d3fe515905d` (git)
  - Other versions: unaffected
- Vendor: Linux. Product: Linux.
  - affected: `3.6`
  - unaffected: `before 3.6` (semver)
  - unaffected: `4.19.325 to 4.19.*, inclusive` (semver)
  - unaffected: `5.4.287 to 5.4.*, inclusive` (semver)
  - unaffected: `5.10.231 to 5.10.*, inclusive` (semver)
  - unaffected: `5.15.174 to 5.15.*, inclusive` (semver)
  - unaffected: `6.1.120 to 6.1.*, inclusive` (semver)
  - unaffected: `6.6.64 to 6.6.*, inclusive` (semver)
  - unaffected: `6.11.11 to 6.11.*, inclusive` (semver)
  - unaffected: `6.12.2 to 6.12.*, inclusive` (semver)
  - unaffected: `6.13 to *, inclusive` (original_commit_for_fix)
  - Other versions: affected

## Not analysed yet

We haven’t published our own analysis of this CVE. If a person reviews it, this page will say what’s affected and what has to be true for it to matter.

## Severity and exploitation

- 7.8 High, CVSS 3.1: `CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H`, from CNA (Linux) (used for this record)
- 7.8 High, CVSS 3.1: `CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H`, from ADP (CISA-ADP)

- **CISA KEV:** Not listed.
- **EPSS:** 0.0026, the 17th percentile, on 7 Nov 2026: FIRST’s estimate of the chance of exploitation in the next 30 days.

## Timeline

This record came from the full history of the CVE Program, published 27 Dec 2024. New records show when each source confirmed them.

## Sources

- [CVE List: CVE-2024-53214](https://www.cve.org/CVERecord?id=CVE-2024-53214)
- [NVD: CVE-2024-53214](https://nvd.nist.gov/vuln/detail/CVE-2024-53214)

### References from the CNA

- <https://git.kernel.org/stable/c/4464e5aa3aa4574063640f1082f7d7e323af8eb4>
- <https://git.kernel.org/stable/c/7d121f66b67921fb3b95e0ea9856bfba53733e91>
- <https://git.kernel.org/stable/c/0918f5643fc6c3f7801f4a22397d2cc09ba99207>
- <https://git.kernel.org/stable/c/9567bd34aa3b986736c290c5bcba47e0182ac47a>
- <https://git.kernel.org/stable/c/6c6502d944168cbd7e03a4a08ad6488f78d73485>
- <https://git.kernel.org/stable/c/06f2fcf49854ad05a09d09e0dbee6544fff04695>
- <https://git.kernel.org/stable/c/949bee8065a85a5c6607c624dc05b5bc17119699>
- <https://git.kernel.org/stable/c/1ef195178fb552478eb2587df4ad3be14ef76507>
- <https://git.kernel.org/stable/c/fe4bf8d0b6716a423b16495d55b35d3fe515905d>

Facts on this page come from the CVE List as the CNA published them, with CVSS from the sources named above, CISA KEV and FIRST EPSS. Vendors, products and versions are shown as the CNA wrote them. We don’t reproduce the CVE’s description.

## Check whether this affects you

This CVE names a vendor and product rather than a package, so the lockfile check doesn’t match it. Compare the affected versions above with what you run.

- With the agentprime MCP server (<https://api.agentprime.io/mcp>), `get_advisory` returns this record and `search_advisories` finds related ones. Setup: <https://agentprime.io/mcp.md>
- As JSON: <https://api.agentprime.io/v1/advisories/CVE-2024-53214>
- Everything that needs attention now: <https://agentprime.io/advisories/critical.md>

---

The web page: <https://agentprime.io/advisories/CVE-2024-53214/>. Everything for agents: <https://agentprime.io/llms.txt>.