Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2024-53150

63
FAUCET Score

CVE-2024-53150 is an out-of-bounds read vulnerability in the Linux kernel's USB-audio driver, affecting Debian and other Linux distributions. It occurs when processing malformed USB audio descriptors with incorrect lengths, leading to potential information disclosure or denial of service. Rated with a CVSS score of 7.1 (High), this vulnerability has a low attack complexity and requires local privileges. Notably, it is actively exploited in the wild, as indicated by its presence in the KEV catalog, and has garnered significant community discussion and media coverage, despite no public exploit code being readily available.

Impacted Technologies

VendorProductVersion(s)CPE
11.0CPE matchmatch criteria
cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*
< 5.4.287CPE matchmatch criteria
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
>= 5.5, < 5.10.231CPE matchmatch criteria
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
>= 5.11, < 5.15.174CPE matchmatch criteria
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
>= 5.16, < 6.1.120CPE matchmatch criteria
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 3.1

7.1HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
HIGH
Exploitability Score
1.8
Impact Score
5.2
CvssVersion
3.1

Exploit Intelligence

EPSS Score
1.35%
Probability of exploitation in next 30 days
EPSS Percentile
68.6%
Percentile rank of EPSS score among Peer Group
As of 2026-07-27
Model: v2026.06.15
Added to KEV · Apr 9, 2025
This CVE's current EPSS score of 0.0135 is in the 95th percentile among its peer group of 17,070 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.2 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.

Media Mentions

The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (44)

autodeskpatch availablevia llm_extracted
View patch
freepbxpatch availablevia llm_extracted
View patch
honeywellpatch availablevia llm_extracted
View patch
linuxpatch availablevia osv
Product: KernelFixed in: 6.1.120
linuxpatch availablevia osv
Product: KernelFixed in: 6.6.64
linuxpatch availablevia osv
Product: KernelFixed in: 6.11.11
linuxpatch availablevia osv
Product: KernelFixed in: 6.12.2
linuxpatch availablevia osv
Product: KernelFixed in: 5.4.287
linuxpatch availablevia osv
Product: KernelFixed in: 5.15.174
linuxpatch availablevia osv
Product: KernelFixed in: 5.10.231
microsoftpatch availablevia msrc
Product: azl3 kernel 6.6.57.1-7 on Azure Linux 3.0Fixed in: 6.6.64.2-1
microsoftpatch availablevia msrc
Product: 17110-16823Fixed in: 5.15.176.3-1
microsoftpatch availablevia msrc
Product: 19675-17086Fixed in: 5.15.176.3-1
microsoftpatch availablevia msrc
Product: 17489-17084Fixed in: 6.6.64.2-1
microsoftpatch availablevia msrc
Product: 17088-17084Fixed in: 6.6.64.2-1
microsoftpatch availablevia msrc
Product: cbl2 kernel 5.15.176.3-1 on CBL Mariner 2.0Fixed in: 5.15.176.3-1
microsoftpatch availablevia msrc
Product: cbl2 kernel 5.15.173.1-2 on CBL Mariner 2.0Fixed in: 5.15.176.3-1
microsoftpatch availablevia msrc
Product: azl3 kernel 6.6.64.2-1 on Azure Linux 3.0Fixed in: 6.6.64.2-1
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update SupportFixed in: kernel-0:4.18.0-372.143.1.el8_6
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 8.6 Telecommunications Update ServiceFixed in: kernel-0:4.18.0-372.143.1.el8_6
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 8.6 Update Services for SAP SolutionsFixed in: kernel-0:4.18.0-372.143.1.el8_6
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 8.8 Extended Update SupportFixed in: kernel-0:4.18.0-477.95.1.el8_8
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 9Fixed in: kernel-0:5.14.0-503.38.1.el9_5
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 9.0 Update Services for SAP SolutionsFixed in: kernel-0:5.14.0-70.130.1.el9_0
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 9.0 Update Services for SAP SolutionsFixed in: kernel-rt-0:5.14.0-70.130.1.rt21.202.el9_0
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 9.2 Extended Update SupportFixed in: kernel-0:5.14.0-284.114.1.el9_2
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 9.2 Extended Update SupportFixed in: kernel-rt-0:5.14.0-284.114.1.rt14.399.el9_2
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 9.4 Extended Update SupportFixed in: kernel-0:5.14.0-427.65.1.el9_4
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift Container Platform 4.12Fixed in: rhcos-412.86.202504240545-0
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift Container Platform 4.14Fixed in: rhcos-414.92.202504210147-0
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift Container Platform 4.15Fixed in: rhcos-415.92.202504282058-0
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift Container Platform 4.17Fixed in: rhcos-417.94.202504142154-0
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift Container Platform 4.18Fixed in: rhcos-418.94.202504170303-0
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 7 Extended Lifecycle SupportFixed in: kernel-0:3.10.0-1160.134.1.el7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 7 Extended Lifecycle SupportFixed in: kernel-rt-0:3.10.0-1160.134.1.rt56.1286.el7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 7.7 Advanced Update SupportFixed in: kernel-0:3.10.0-1062.95.1.el7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSIONFixed in: kernel-0:2.6.32-754.57.1.el6
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 8Fixed in: kernel-rt-0:4.18.0-553.50.1.rt7.391.el8_10
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 8Fixed in: kernel-0:4.18.0-553.50.1.el8_10
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 8.2 Advanced Update SupportFixed in: kernel-0:4.18.0-193.150.1.el8_2
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update SupportFixed in: kernel-0:4.18.0-305.154.1.el8_4
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 8.4 Telecommunications Update ServiceFixed in: kernel-rt-0:4.18.0-305.154.1.rt7.231.el8_4
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 8.4 Telecommunications Update ServiceFixed in: kernel-0:4.18.0-305.154.1.el8_4
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 8.4 Update Services for SAP SolutionsFixed in: kernel-0:4.18.0-305.154.1.el8_4
View patch

Vendor Advisories (6)

honeywellllm-honeywell-c82b5cfda9df97a3CRITICAL

HP ThinPro 8.1 SP8 Security Updates

Oct 27, 2025
autodeskllm-autodesk-c365b674a2ff5a3aCRITICAL

HP ThinPro 8.1 SP8 Security Updates

Oct 27, 2025
freepbxllm-freepbx-e54908c7967265f6CRITICAL

HP ThinPro 8.1 SP8 Security Updates

Oct 27, 2025
linuxCVE-2024-53150HIGH

ALSA: usb-audio: Fix out of bounds reads when finding clock sources

Dec 24, 2024
redhatCVE-2024-53150Moderate

kernel: ALSA: usb-audio: Fix out of bounds reads when finding clock sources

Dec 24, 2024
microsoft2024-Dec/CVE-2024-53150Important

ALSA: usb-audio: Fix out of bounds reads when finding clock sources

Dec 10, 2024

References

cisa.gov / known-exploited-vulnerabilities-catalog
US Government Resource
git.kernel.org / stable/c/096bb5b43edf755bc4477e64004fa3a20539ec2f
Patch
git.kernel.org / stable/c/45a92cbc88e4013bfed7fd2ccab3ade45f8e896b
Patch
git.kernel.org / stable/c/74cb86e1006c5437b1d90084d22018da30fddc77
Patch
git.kernel.org / stable/c/a3dd4d63eeb452cfb064a13862fb376ab108f6a6
Patch
git.kernel.org / stable/c/a632bdcb359fd8145e86486ff8612da98e239acd
Patch
git.kernel.org / stable/c/ab011f7439d9bbfd34fd3b9cef4b2d6d952c9bb9
Patch
git.kernel.org / stable/c/da13ade87a12dd58829278bc816a61bea06a56a9
Patch
git.kernel.org / stable/c/ea0fa76f61cf8e932d1d26e6193513230816e11d
Patch
lists.debian.org / debian-lts-announce/2025/03/msg00001.html
Mailing List
lists.debian.org / debian-lts-announce/2025/03/msg00002.html
Mailing List