Connect your agent
AdvisoriesCriticalCheck your lockfilePluginHow it worksPricing Connect your agent

CVE record · CVE-2024-53214

vfio/pci: Properly hide first-in-list PCIe extended capability

CVSS 7.8 HighEPSS 0.0026 · 17th percentile

Published by the CVE Program (CNA: Linux) at 27 Dec 2024, 13:49 UTC. agentprime has not analysed this yet, so whether it affects any app is not known. This CVE names a vendor and product rather than a package, so the lockfile check doesn’t match it.

Affected products, as the CNA wrote them
VendorProductVersions
Linux Linux
  • affected 89e1f7d4c66d85f42c3d52ea3866eb10cadf6153 to before 4464e5aa3aa4574063640f1082f7d7e323af8eb4 git
  • affected 89e1f7d4c66d85f42c3d52ea3866eb10cadf6153 to before 7d121f66b67921fb3b95e0ea9856bfba53733e91 git
  • affected 89e1f7d4c66d85f42c3d52ea3866eb10cadf6153 to before 0918f5643fc6c3f7801f4a22397d2cc09ba99207 git
  • affected 89e1f7d4c66d85f42c3d52ea3866eb10cadf6153 to before 9567bd34aa3b986736c290c5bcba47e0182ac47a git
  • affected 89e1f7d4c66d85f42c3d52ea3866eb10cadf6153 to before 6c6502d944168cbd7e03a4a08ad6488f78d73485 git
  • affected 89e1f7d4c66d85f42c3d52ea3866eb10cadf6153 to before 06f2fcf49854ad05a09d09e0dbee6544fff04695 git
  • affected 89e1f7d4c66d85f42c3d52ea3866eb10cadf6153 to before 949bee8065a85a5c6607c624dc05b5bc17119699 git
  • affected 89e1f7d4c66d85f42c3d52ea3866eb10cadf6153 to before 1ef195178fb552478eb2587df4ad3be14ef76507 git
  • affected 89e1f7d4c66d85f42c3d52ea3866eb10cadf6153 to before fe4bf8d0b6716a423b16495d55b35d3fe515905d git
Other versions: unaffected
Linux Linux
  • affected 3.6
  • unaffected before 3.6 semver
  • unaffected 4.19.325 to 4.19.*, inclusive semver
  • unaffected 5.4.287 to 5.4.*, inclusive semver
  • unaffected 5.10.231 to 5.10.*, inclusive semver
  • unaffected 5.15.174 to 5.15.*, inclusive semver
  • unaffected 6.1.120 to 6.1.*, inclusive semver
  • unaffected 6.6.64 to 6.6.*, inclusive semver
  • unaffected 6.11.11 to 6.11.*, inclusive semver
  • unaffected 6.12.2 to 6.12.*, inclusive semver
  • unaffected 6.13 to *, inclusive original_commit_for_fix
Other versions: affected
Identifiers
CVE-2024-53214
CNA
Linux
Weakness (CWE)
CWE-129
Tags
Published
27 Dec 2024
Updated
5 Aug 2026

Not analysed yet

We haven’t published our own analysis of this CVE. If a person reviews it, this page will say what’s affected and what has to be true for it to matter.

Severity and exploitation

ScoreRatingCVSSVectorSource
7.8 High 3.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CNA (Linux)Used for this record
7.8 High 3.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H ADP (CISA-ADP)
  • CISA KEV Not listed.
  • EPSS 0.0026, the 17th percentile, on 7 Nov 2026: FIRST’s estimate of the chance of exploitation in the next 30 days.

Timeline

This record came from the full history of the CVE Program, published 27 Dec 2024. New records show when each source confirmed them.

Sources

References from the CNA

Facts on this page come from the CVE List as the CNA published them, with CVSS from the sources named above, CISA KEV and FIRST EPSS. Vendors, products and versions are shown as the CNA wrote them. We don’t reproduce the CVE’s description.