All vulnerabilities
CVE-2024-53197

Linux Kernel Out-of-Bounds Access Vulnerability

Linux KernelOperating systems
Open in ThreatlineRecord JSON
CVSS
7.8High
ExploitationExploited in the wildAdded to KEV 9 Apr 2025CISA KEV
Exploit odds (EPSS)4.12%Chance of exploitation activity in the next 30 days, higher than 90% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed in0b4ea4bfe16566b84645ded1403756a2dc4e0f19Also 9b8460a2a7ce478e0b625af7c56d444dc24190f7, 62dc01c83fa71e10446ee4c31e0e3d5d1291e865 and 3 moreCVE List
Federal deadline30 Apr 2025Remediation due date for US federal agenciesCISA KEV
CISA required actionApply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable. CISA KEV

What fixes it

  • 0b4ea4bfe16566b84645ded1403756a2dc4e0f19LinuxCVE List
  • 9b8460a2a7ce478e0b625af7c56d444dc24190f7LinuxCVE List
  • 62dc01c83fa71e10446ee4c31e0e3d5d1291e865LinuxCVE List
  • 9887d859cd60727432a01564e8f91302d361b72bLinuxCVE List
  • 920a369a9f014f10ec282fd298d0666129379f1bLinuxCVE List
  • 379d3b9799d9da953391e973b934764f01e03960LinuxCVE List

A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.

Timeline

  1. 27 Dec 2024, 13:49 UTCPublishedCVE List
  2. 9 Apr 2025Added to CISA KEVCISA KEV

Description

Linux Kernel contains an out-of-bounds access vulnerability in the USB-audio driver that allows an attacker with physical access to the system to use a malicious USB device to potentially manipulate system memory, escalate privileges, or execute arbitrary code.

Text from CVE List

Affected versions 20

  • Linuxaffected: 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 0b4ea4bfe16566b84645ded1403756a2dc4e0f19CVE List
  • Linuxaffected: 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 9b8460a2a7ce478e0b625af7c56d444dc24190f7CVE List
  • Linuxaffected: 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 62dc01c83fa71e10446ee4c31e0e3d5d1291e865CVE List
  • Linuxaffected: 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 9887d859cd60727432a01564e8f91302d361b72bCVE List
  • Linuxaffected: 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 920a369a9f014f10ec282fd298d0666129379f1bCVE List
  • Linuxaffected: 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before b8f8b81dabe52b413fe9e062e8a852c48dd0680dCVE List
  • Linuxaffected: 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 379d3b9799d9da953391e973b934764f01e03960CVE List
  • Linuxaffected: 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before b521b53ac6eb04e41c03f46f7fe452e4d8e9bccaCVE List
  • Linuxaffected: 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before b909df18ce2a998afef81d58bbd1a05dc0788c40CVE List
  • Linuxaffected: 2.6.12CVE List
  • Linuxunaffected: all versions before 2.6.12CVE List
  • Linuxunaffected: 4.19.325 through 4.19.*CVE List
  • Linuxunaffected: 5.4.287 through 5.4.*CVE List
  • Linuxunaffected: 5.10.231 through 5.10.*CVE List
  • Linuxunaffected: 5.15.174 through 5.15.*CVE List
  • Linuxunaffected: 6.1.120 through 6.1.*CVE List
  • Linuxunaffected: 6.6.64 through 6.6.*CVE List
  • Linuxunaffected: 6.11.11 through 6.11.*CVE List
  • Linuxunaffected: 6.12.2 through 6.12.*CVE List
  • Linuxunaffected: 6.13CVE List

References 14