All vulnerabilities
CVE-2024-53150

Linux Kernel Out-of-Bounds Read Vulnerability

Linux KernelOperating systems
Open in ThreatlineRecord JSON
CVSS
7.1High
ExploitationExploited in the wildAdded to KEV 9 Apr 2025CISA KEV
Exploit odds (EPSS)1.35%Chance of exploitation activity in the next 30 days, higher than 71% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed in45a92cbc88e4013bfed7fd2ccab3ade45f8e896bAlso 74cb86e1006c5437b1d90084d22018da30fddc77, 096bb5b43edf755bc4477e64004fa3a20539ec2f and 2 moreCVE List
Federal deadline30 Apr 2025Remediation due date for US federal agenciesCISA KEV
CISA required actionApply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable. CISA KEV

What fixes it

A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.

Timeline

  1. 24 Dec 2024, 11:28 UTCPublishedCVE List
  2. 9 Apr 2025Added to CISA KEVCISA KEV

Description

Linux Kernel contains an out-of-bounds read vulnerability in the USB-audio driver that allows a local, privileged attacker to obtain potentially sensitive information.

Text from CVE List

Affected versions 22

  • Linuxaffected: b8e4f1fdfa422398c2d6c47bfb7d1feb3046d70a before a632bdcb359fd8145e86486ff8612da98e239acdCVE List
  • Linuxaffected: b8e4f1fdfa422398c2d6c47bfb7d1feb3046d70a before 45a92cbc88e4013bfed7fd2ccab3ade45f8e896bCVE List
  • Linuxaffected: b8e4f1fdfa422398c2d6c47bfb7d1feb3046d70a before ab011f7439d9bbfd34fd3b9cef4b2d6d952c9bb9CVE List
  • Linuxaffected: b8e4f1fdfa422398c2d6c47bfb7d1feb3046d70a before da13ade87a12dd58829278bc816a61bea06a56a9CVE List
  • Linuxaffected: b8e4f1fdfa422398c2d6c47bfb7d1feb3046d70a before 74cb86e1006c5437b1d90084d22018da30fddc77CVE List
  • Linuxaffected: b8e4f1fdfa422398c2d6c47bfb7d1feb3046d70a before ea0fa76f61cf8e932d1d26e6193513230816e11dCVE List
  • Linuxaffected: b8e4f1fdfa422398c2d6c47bfb7d1feb3046d70a before 096bb5b43edf755bc4477e64004fa3a20539ec2fCVE List
  • Linuxaffected: b8e4f1fdfa422398c2d6c47bfb7d1feb3046d70a before a3dd4d63eeb452cfb064a13862fb376ab108f6a6CVE List
  • Linuxaffected: 9feeaa50e5b4b0b71259d918a36ecf9059e60796CVE List
  • Linuxaffected: 3b17a13b687ae99939dc94a4ae01fbc34f68deccCVE List
  • Linuxaffected: 4.19.84 before 4.20CVE List
  • Linuxaffected: 5.3.11 before 5.4CVE List
  • Linuxaffected: 5.4CVE List
  • Linuxunaffected: all versions before 5.4CVE List
  • Linuxunaffected: 5.4.287 through 5.4.*CVE List
  • Linuxunaffected: 5.10.231 through 5.10.*CVE List
  • Linuxunaffected: 5.15.174 through 5.15.*CVE List
  • Linuxunaffected: 6.1.120 through 6.1.*CVE List
  • Linuxunaffected: 6.6.64 through 6.6.*CVE List
  • Linuxunaffected: 6.11.11 through 6.11.*CVE List
  • Linuxunaffected: 6.12.2 through 6.12.*CVE List
  • Linuxunaffected: 6.13CVE List

References 13