CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Linux Kernel ALSA USB Audio Driver Out-of-Bounds Access Vulnerability (CVE-2024-53197)
[Affected Scope] Linux kernel environments utilizing specific USB audio devices such as Creative Extigy and Digidesign Mbox
[Impact] Connecting a maliciously crafted USB device can trigger an out-of-bounds memory access in the kernel, potentially leading to a Denial of Service (Kernel Panic) or Local Privilege Escalation (LPE)
[Mitigation] Apply the latest stable kernel patches from your distribution or blacklist the unused ALSA USB audio kernel module
Linux Kernel ALSA USB-Audio Out-of-Bounds Read Vulnerability (CVE-2024-53150)
[Affected Scope] Systems running the Linux kernel with the ALSA (Advanced Linux Sound Architecture) USB-Audio driver enabled.
[Impact] A local attacker can trigger an out-of-bounds read by connecting a malicious USB audio device, potentially leading to kernel memory disclosure or system crash (DoS).
[Mitigation] Apply the latest Linux kernel security patches and restrict unauthorized USB device connections and driver loading.