CVE-2024-53197: Linux Kernel Out-of-Bounds Access Vulnerability
In the Linux kernel, the following vulnerability has been resolved:
ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices
A bogus device can provide a bNumConfigurations value that exceeds the initial value used in usbgetconfiguration for allocating dev->config.
This can lead to out-of-bounds accesses later, e.g. in usbdestroyconfiguration.
Other sources
Linux Kernel contains an out-of-bounds access vulnerability in the USB-audio driver that allows an attacker with physical access to the system to use a malicious USB device to potentially manipulate system memory, escalate privileges, or execute arbitrary code.
— CISA
This CVE was automatically created from a reference found in an email or other text. If you are reading this, then this CVE entry is probably erroneous, since this text should be replaced by the official CVE description automatically.
— Launchpad
Affected Software
Remediation
Information
Event History
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
What is the severity of CVE-2024-53197?
CVE-2024-53197 has a medium severity rating due to its potential to cause out-of-bound access in certain ALSA usb-audio devices.
How do I fix CVE-2024-53197?
To fix CVE-2024-53197, ensure you update your Linux kernel to the latest version that includes the patch addressing this vulnerability.
What software is affected by CVE-2024-53197?
CVE-2024-53197 affects the Linux Kernel, specifically impacting ALSA usb-audio drivers for Extigy and Mbox devices.
What are the potential impacts of CVE-2024-53197?
The potential impacts of CVE-2024-53197 may include system instability or crashes due to out-of-bounds access in the affected devices.
When was CVE-2024-53197 reported?
CVE-2024-53197 was reported as a vulnerability in the Linux kernel affecting ALSA usb-audio functionality.