CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2024-12-27
Linux Kernel ALSA USB Audio Driver Out-of-Bounds Access Vulnerability (CVE-2024-53197)
[Affected Scope] Linux kernel environments utilizing specific USB audio devices such as Creative Extigy and Digidesign Mbox
[Impact] Connecting a maliciously crafted USB device can trigger an out-of-bounds memory access in the kernel, potentially leading to a Denial of Service (Kernel Panic) or Local Privilege Escalation (LPE)
[Mitigation] Apply the latest stable kernel patches from your distribution or blacklist the unused ALSA USB audio kernel module