Back to CVE Browser

CVE-2024-53197

🔥 Known Exploited (CISA KEV)HIGH

7.8

CVSS Severity Score

EPSS Score0.0000%

EPSS Percentile0.00th

Published2024-12-27

Last Modified2026-06-17

Data SourcesNVDCISA KEV

Vulnerability Description

In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices A bogus device can provide a bNumConfigurations value that exceeds the initial value used in usb_get_configuration for allocating dev->config. This can lead to out-of-bounds accesses later, e.g. in usb_destroy_configuration.

Affected Platforms (CPE)

💻

Linux

Linux Kernel

>= 2.6.12 and < 4.19.325>= 4.20 and < 5.4.287>= 5.5 and < 5.10.231>= 5.11 and < 5.15.174>= 5.16 and < 6.1.120>= 6.2 and < 6.6.64>= 6.7 and < 6.11.11>= 6.12 and < 6.12.2

💻

Debian

Debian Linux

= 11.0

References & Advisories

🔗 https://git.kernel.org/stable/c/0b4ea4bfe16566b84645ded1403756a2dc4e0f19

🔗 https://git.kernel.org/stable/c/379d3b9799d9da953391e973b934764f01e03960

🔗 https://git.kernel.org/stable/c/62dc01c83fa71e10446ee4c31e0e3d5d1291e865

🔗 https://git.kernel.org/stable/c/920a369a9f014f10ec282fd298d0666129379f1b

🔗 https://git.kernel.org/stable/c/9887d859cd60727432a01564e8f91302d361b72b

🔗 https://git.kernel.org/stable/c/9b8460a2a7ce478e0b625af7c56d444dc24190f7

🔗 https://git.kernel.org/stable/c/b521b53ac6eb04e41c03f46f7fe452e4d8e9bcca

🔗 https://git.kernel.org/stable/c/b8f8b81dabe52b413fe9e062e8a852c48dd0680d

Related Vulnerabilities

CVE-2026-175237.8

A flaw was found in the kernel. An unprivileged local user can exploit this vulnerability to execute arbitrary code within the ker...

In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix OOB reads in is_ap_in_tkip() IE loop ...

In the Linux kernel, the following vulnerability has been resolved: nvmet-tcp: Fix potential UAF when ddgst mismatch Shivam Kuma...

In the Linux kernel, the following vulnerability has been resolved: nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in diges...