CVE-2024-53197

Linux Kernel Out-of-Bounds Access Vulnerability

Linux Kernel

In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices A bogus device can provide a bNumConfigurations value that exceeds the initial value used in usb_get_configuration for allocating dev->config. This can lead to out-of-bounds accesses later, e.g. in usb_destroy_configuration.

27. Dez 2024

Ausgewertete Quellen

• Debian
  https://lists.debian.org/debian-lts-announce/2025/03/msg00001.html
• Debian
  https://lists.debian.org/debian-lts-announce/2025/03/msg00002.html
• CISA
  https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-53197
• CISA
  Linux Kernel Out-of-Bounds Access Vulnerability
• NVD
  CVE-2024-53197