CVE-2024-53197

66

FAUCET Score

CVE-2024-53197 is a high-severity out-of-bounds write vulnerability (CWE-787) in the Linux kernel's ALSA USB audio driver, specifically affecting Extigy and Mbox devices, and impacting Debian and other Linux distributions. An attacker with local access could exploit this by providing a malformed USB device configuration, leading to system compromise with high confidentiality, integrity, and availability impacts. This vulnerability is actively exploited in the wild, as confirmed by its presence in the KEV catalog, and has garnered significant community discussion and media attention, despite no public exploit code being readily available.

Impacted Technologies

Vendor	Product	Version(s)	CPE
		>= 2.6.12, < 4.19.325CPE matchmatch criteria	cpe:2.3:o:linux:linux_kernel::::::::
		>= 4.20, < 5.4.287CPE matchmatch criteria	cpe:2.3:o:linux:linux_kernel::::::::
		>= 5.5, < 5.10.231CPE matchmatch criteria	cpe:2.3:o:linux:linux_kernel::::::::
		>= 5.11, < 5.15.174CPE matchmatch criteria	cpe:2.3:o:linux:linux_kernel::::::::
		>= 5.16, < 6.1.120CPE matchmatch criteria	cpe:2.3:o:linux:linux_kernel::::::::

CVSS Data

CVSS version used by this source: 3.1

7.8HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

Exploitability Score

1.8

Impact Score

5.9

CvssVersion

3.1

Exploit Intelligence

EPSS Score

3.56%

Probability of exploitation in next 30 days

EPSS Percentile

88.1%

Percentile rank of EPSS score among Peer Group

As of 2026-07-27

Model: v2026.06.15

Added to KEV · Apr 9, 2025

This CVE's current EPSS score of 0.0356 is in the 98th percentile among its peer group of 16,994 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.2 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.

Media Mentions

The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (39)

autodeskpatch availablevia llm_extracted

freepbxpatch availablevia llm_extracted

honeywellpatch availablevia llm_extracted

linuxpatch availablevia osv

Product: KernelFixed in: 5.15.174

linuxpatch availablevia osv

Product: KernelFixed in: 6.1.120

linuxpatch availablevia osv

Product: KernelFixed in: 6.6.64

linuxpatch availablevia osv

Product: KernelFixed in: 6.11.11

linuxpatch availablevia osv

Product: KernelFixed in: 6.12.2

linuxpatch availablevia osv

Product: KernelFixed in: 4.19.325

linuxpatch availablevia osv

Product: KernelFixed in: 5.4.287

linuxpatch availablevia osv

Product: KernelFixed in: 5.10.231

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 7 Extended Lifecycle SupportFixed in: kernel-0:3.10.0-1160.133.1.el7

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8Fixed in: kernel-rt-0:4.18.0-553.44.1.rt7.385.el8_10

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8Fixed in: kernel-0:4.18.0-553.44.1.el8_10

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8.2 Advanced Update SupportFixed in: kernel-0:4.18.0-193.146.1.el8_2

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update SupportFixed in: kernel-0:4.18.0-305.151.1.el8_4

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8.4 Telecommunications Update ServiceFixed in: kernel-rt-0:4.18.0-305.151.1.rt7.228.el8_4

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8.4 Telecommunications Update ServiceFixed in: kernel-0:4.18.0-305.151.1.el8_4

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8.4 Update Services for SAP SolutionsFixed in: kernel-0:4.18.0-305.151.1.el8_4

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update SupportFixed in: kernel-0:4.18.0-372.141.1.el8_6

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8.6 Telecommunications Update ServiceFixed in: kernel-0:4.18.0-372.141.1.el8_6

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8.6 Update Services for SAP SolutionsFixed in: kernel-0:4.18.0-372.141.1.el8_6

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8.8 Extended Update SupportFixed in: kernel-0:4.18.0-477.93.1.el8_8

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 9Fixed in: kernel-0:5.14.0-503.31.1.el9_5

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 9.0 Update Services for SAP SolutionsFixed in: kernel-0:5.14.0-70.125.1.el9_0

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 9.0 Update Services for SAP SolutionsFixed in: kernel-rt-0:5.14.0-70.125.1.rt21.197.el9_0

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 9.2 Extended Update SupportFixed in: kernel-0:5.14.0-284.108.1.el9_2

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 9.2 Extended Update SupportFixed in: kernel-rt-0:5.14.0-284.108.1.rt14.393.el9_2

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 9.4 Extended Update SupportFixed in: kernel-0:5.14.0-427.59.1.el9_4

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Container Platform 4.12Fixed in: rhcos-412.86.202503310142-0

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Container Platform 4.13Fixed in: rhcos-413.92.202503112237-0

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Container Platform 4.14Fixed in: rhcos-414.92.202503100617-0

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Container Platform 4.15Fixed in: rhcos-415.92.202503190057-0

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Container Platform 4.16Fixed in: rhcos-416.94.202503252048-0

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Container Platform 4.17Fixed in: rhcos-417.94.202503110101-0

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift Container Platform 4.18Fixed in: rhcos-418.94.202503102036-0

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 7 Extended Lifecycle SupportFixed in: kernel-rt-0:3.10.0-1160.133.1.rt56.1285.el7

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 7.7 Advanced Update SupportFixed in: kernel-0:3.10.0-1062.93.1.el7

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSIONFixed in: kernel-0:2.6.32-754.56.1.el6

Vendor Advisories (5)

honeywellllm-honeywell-c82b5cfda9df97a3CRITICAL

HP ThinPro 8.1 SP8 Security Updates

autodeskllm-autodesk-c365b674a2ff5a3aCRITICAL

HP ThinPro 8.1 SP8 Security Updates

freepbxllm-freepbx-e54908c7967265f6CRITICAL

HP ThinPro 8.1 SP8 Security Updates

linuxCVE-2024-53197HIGH

ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices

redhatCVE-2024-53197Important

kernel: ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices

References

cisa.gov / known-exploited-vulnerabilities-catalog

US Government Resource

git.kernel.org / stable/c/0b4ea4bfe16566b84645ded1403756a2dc4e0f19

Patch

git.kernel.org / stable/c/379d3b9799d9da953391e973b934764f01e03960

Patch

git.kernel.org / stable/c/62dc01c83fa71e10446ee4c31e0e3d5d1291e865

Patch

git.kernel.org / stable/c/920a369a9f014f10ec282fd298d0666129379f1b

Patch

git.kernel.org / stable/c/9887d859cd60727432a01564e8f91302d361b72b

Patch

git.kernel.org / stable/c/9b8460a2a7ce478e0b625af7c56d444dc24190f7

Patch

git.kernel.org / stable/c/b521b53ac6eb04e41c03f46f7fe452e4d8e9bcca

Patch

git.kernel.org / stable/c/b8f8b81dabe52b413fe9e062e8a852c48dd0680d

Patch

git.kernel.org / stable/c/b909df18ce2a998afef81d58bbd1a05dc0788c40

Patch

lists.debian.org / debian-lts-announce/2025/03/msg00001.html

Mailing List

lists.debian.org / debian-lts-announce/2025/03/msg00002.html

Mailing List