ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices
Priority CRITICAL 93Exploited in the wildCWE-787Published · Updated
Key facts
- Attack vector
- Local
- Privileges required
- Low
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Code execution
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- Fixed
Attack profile from CVSS 3.1 · CISA ADP. Fix status from CNA and Red Hat. Impact type from CWE-787 and the CVSS impact.
Summary
In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices A bogus device can provide a bNumConfigurations value that exceeds the initial value used in usb_get_configuration for allocating dev->config. This can lead to out-of-bounds accesses later, e.g. in usb_destroy_configuration.
Why it matters now
Exploitation Active In CISA KEV since 2025-04-09CISA due date 2025-04-30
EPSS 0.04117 90th percentileScored 2026-11-07
Fix Fixed Linux (Linux): 4.19.325, 5.4.287, 5.10.231 +6Red Hat: 24 advisories
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- Active
- Automatable
- No
- Technical impact
- Total
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Linux | Linux | 2.6.12 and later | 4.19.325, 5.4.287, 5.10.231, 5.15.174, 6.1.120, 6.6.64, 6.11.11, 6.12.2, 6.13 | Patch available | CNA |
- Linux VendorLinux Affected 2.6.12 and later Fixed in 4.19.325, 5.4.287, 5.10.231, 5.15.174, 6.1.120, 6.6.64, 6.11.11, 6.12.2, 6.13 Patch available CNA
CPE configurations NVD · 2
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 2.6.12 to before 4.19.325; 4.20 to before 5.4.287; 5.5 to before 5.10.231; 5.11 to before 5.15.174; 5.16 to before 6.1.120; 6.2 to before 6.6.64; 6.7 to before 6.11.11; 6.12 to before 6.12.2 | Vulnerable | Linux |
| cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:* | 11.0 | Vulnerable | Debian |
- cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* Versions 2.6.12 to before 4.19.325; 4.20 to before 5.4.287; 5.5 to before 5.10.231; 5.11 to before 5.15.174; 5.16 to before 6.1.120; 6.2 to before 6.6.64; 6.7 to before 6.11.11; 6.12 to before 6.12.2 Vulnerable ·Linux
- cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:* Versions 11.0 Vulnerable ·Debian
Remediation
- Fix · CNA Linux (Linux) Fixed in 4.19.325, 5.4.287, 5.10.231, 5.15.174, 6.1.120, 6.6.64, 6.11.11, 6.12.2, 6.13
Red Hat 24 advisories
- RHSA-2025:3573 Released 2025-04-10 · Red Hat rating ImportantOpenShift Container Platform 4.12.75 packages and security update
- Red Hat OpenShift Container Platform 4.12 openshift4/network-tools-rhel8, openshift4/ose-agent-installer-node-agent-rhel8, openshift4/ose-docker-builder +5
- RHSA-2025:3301 Released 2025-04-03 · Red Hat rating ImportantOpenShift Container Platform 4.16.38 bug fix and security update
- Red Hat OpenShift Container Platform 4.16 openshift4/ose-agent-installer-api-server-rhel9, openshift4/ose-aws-pod-identity-webhook-rhel9, openshift4/ose-azure-workload-identity-webhook-rhel9 +3
- RHSA-2025:3055 Released 2025-03-26 · Red Hat rating ImportantOpenShift Container Platform 4.15.48 security update
- Red Hat OpenShift Container Platform 4.15 rhcos
Show 21 more Red Hat advisories
- RHSA-2025:2701 Released 2025-03-20 · Red Hat rating ImportantOpenShift Container Platform 4.13.56 bug fix and security update
- Red Hat OpenShift Container Platform 4.13 openshift4/ose-agent-installer-csr-approver-rhel8, openshift4/ose-agent-installer-node-agent-rhel8, openshift4/ose-agent-installer-orchestrator-rhel8 +3
- RHSA-2025:2710 Released 2025-03-19 · Red Hat rating ImportantOpenShift Container Platform 4.14.49 bug fix and security update
- Red Hat OpenShift Container Platform 4.14 openshift4/ose-agent-installer-node-agent-rhel9, openshift4/ose-docker-builder, rhcos
- RHSA-2025:2696 Released 2025-03-19 · Red Hat rating ImportantOpenShift Container Platform 4.17.21 bug fix and security update
- Red Hat OpenShift Container Platform 4.17 rhcos
- RHSA-2025:2705 Released 2025-03-18 · Red Hat rating ImportantOpenShift Container Platform 4.18.5 bug fix and security update
- Red Hat OpenShift Container Platform 4.18 rhcos
- RHSA-2025:2646 Released 2025-03-11 · Red Hat rating Importantkernel security update
- Red Hat Enterprise Linux BaseOS AUS (v. 8.2) bpftool-4.18.0-193.146.1.el8_2, kernel-4.18.0-193.146.1.el8_2, kernel-abi-whitelists-4.18.0-193.146.1.el8_2 +14
- RHSA-2025:2627 Released 2025-03-11 · Red Hat rating Importantkernel security update
- Red Hat CodeReady Linux Builder (v. 9) kernel-tools-libs-devel-5.14.0-503.31.1.el9_5, libperf-5.14.0-503.31.1.el9_5
- Red Hat Enterprise Linux AppStream (v. 9) kernel-64k-debug-devel-5.14.0-503.31.1.el9_5, kernel-64k-debug-devel-matched-5.14.0-503.31.1.el9_5, kernel-64k-devel-5.14.0-503.31.1.el9_5 +11
- Red Hat Enterprise Linux BaseOS (v. 9) bpftool-7.4.0-503.31.1.el9_5, kernel-5.14.0-503.31.1.el9_5, kernel-64k-5.14.0-503.31.1.el9_5 +30
- Red Hat Enterprise Linux Real Time (v. 9) kernel-rt-5.14.0-503.31.1.el9_5, kernel-rt-core-5.14.0-503.31.1.el9_5, kernel-rt-debug-5.14.0-503.31.1.el9_5 +9
- Red Hat Enterprise Linux Real Time for NFV (v. 9) kernel-rt-5.14.0-503.31.1.el9_5, kernel-rt-core-5.14.0-503.31.1.el9_5, kernel-rt-debug-5.14.0-503.31.1.el9_5 +11
- RHSA-2025:2528 Released 2025-03-10 · Red Hat rating Importantkernel security update
- Red Hat Enterprise Linux BaseOS AUS (v.8.4) bpftool-4.18.0-305.151.1.el8_4, kernel-4.18.0-305.151.1.el8_4, kernel-abi-stablelists-4.18.0-305.151.1.el8_4 +14
- Red Hat Enterprise Linux BaseOS E4S (v.8.4) bpftool-4.18.0-305.151.1.el8_4, kernel-4.18.0-305.151.1.el8_4, kernel-abi-stablelists-4.18.0-305.151.1.el8_4 +14
- Red Hat Enterprise Linux BaseOS TUS (v.8.4) bpftool-4.18.0-305.151.1.el8_4, kernel-4.18.0-305.151.1.el8_4, kernel-abi-stablelists-4.18.0-305.151.1.el8_4 +14
- RHSA-2025:2525 Released 2025-03-10 · Red Hat rating Importantkernel security update
- Red Hat CodeReady Linux Builder EUS (v.8.8) kernel-tools-libs-devel-4.18.0-477.93.1.el8_8
- Red Hat Enterprise Linux BaseOS EUS (v.8.8) bpftool-4.18.0-477.93.1.el8_8, kernel-4.18.0-477.93.1.el8_8, kernel-abi-stablelists-4.18.0-477.93.1.el8_8 +19
- RHSA-2025:2524 Released 2025-03-10 · Red Hat rating Importantkernel-rt security update
- Red Hat Enterprise Linux NFV TUS (v.8.4) kernel-rt-4.18.0-305.151.1.rt7.228.el8_4, kernel-rt-core-4.18.0-305.151.1.rt7.228.el8_4, kernel-rt-debug-4.18.0-305.151.1.rt7.228.el8_4 +9
- Red Hat Enterprise Linux RT TUS (v.8.4) kernel-rt-4.18.0-305.151.1.rt7.228.el8_4, kernel-rt-core-4.18.0-305.151.1.rt7.228.el8_4, kernel-rt-debug-4.18.0-305.151.1.rt7.228.el8_4 +7
- RHSA-2025:2488 Released 2025-03-10 · Red Hat rating Importantkernel security update
- Red Hat Enterprise Linux AppStream E4S (v.9.0) kernel-debug-devel-5.14.0-70.125.1.el9_0, kernel-debug-devel-matched-5.14.0-70.125.1.el9_0, kernel-devel-5.14.0-70.125.1.el9_0 +5
- Red Hat Enterprise Linux BaseOS E4S (v.9.0) bpftool-5.14.0-70.125.1.el9_0, kernel-5.14.0-70.125.1.el9_0, kernel-abi-stablelists-5.14.0-70.125.1.el9_0 +14
- RHSA-2025:2517 Released 2025-03-10 · Red Hat rating Importantkernel security update
- Red Hat Enterprise Linux Server -EXTENSION(v. 6 ELS-EXTENSION) kernel-2.6.32-754.56.1.el6, kernel-abi-whitelists-2.6.32-754.56.1.el6, kernel-debug-2.6.32-754.56.1.el6 +7
- Red Hat Enterprise Linux Server Optional -EXTENSION (v. 6 ELS -EXTENSION) python-perf-2.6.32-754.56.1.el6
- RHSA-2025:2514 Released 2025-03-10 · Red Hat rating Importantkernel security update
- Red Hat Enterprise Linux Server AUS (v. 7.7) bpftool-3.10.0-1062.93.1.el7, kernel-3.10.0-1062.93.1.el7, kernel-abi-whitelists-3.10.0-1062.93.1.el7 +8
- Red Hat Enterprise Linux Server Optional AUS (v. 7.7) kernel-tools-libs-devel-3.10.0-1062.93.1.el7
- RHSA-2025:2512 Released 2025-03-10 · Red Hat rating Importantkernel-rt security update
- Red Hat Enterprise Linux NFV E4S (v.9.0) kernel-rt-5.14.0-70.125.1.rt21.197.el9_0, kernel-rt-core-5.14.0-70.125.1.rt21.197.el9_0, kernel-rt-debug-5.14.0-70.125.1.rt21.197.el9_0 +9
- Red Hat Enterprise Linux Real Time E4S (v.9.0) kernel-rt-5.14.0-70.125.1.rt21.197.el9_0, kernel-rt-core-5.14.0-70.125.1.rt21.197.el9_0, kernel-rt-debug-5.14.0-70.125.1.rt21.197.el9_0 +7
- RHSA-2025:2510 Released 2025-03-10 · Red Hat rating Importantkernel-rt security update
- Red Hat Enterprise Linux for Real Time (v. 7 ELS) kernel-rt-3.10.0-1160.133.1.rt56.1285.el7, kernel-rt-debug-3.10.0-1160.133.1.rt56.1285.el7, kernel-rt-debug-devel-3.10.0-1160.133.1.rt56.1285.el7 +4
- RHSA-2025:2501 Released 2025-03-10 · Red Hat rating Importantkernel security update
- Red Hat Enterprise Linux Server (v. 7 ELS) bpftool-3.10.0-1160.133.1.el7, kernel-3.10.0-1160.133.1.el7, kernel-abi-whitelists-3.10.0-1160.133.1.el7 +11
- Red Hat Enterprise Linux Server Optional (v. 7 ELS) kernel-debug-devel-3.10.0-1160.133.1.el7, kernel-tools-libs-devel-3.10.0-1160.133.1.el7
- RHSA-2025:2490 Released 2025-03-10 · Red Hat rating Importantkernel security update
- Red Hat CodeReady Linux Builder EUS (v.9.4) kernel-tools-libs-devel-5.14.0-427.59.1.el9_4, libperf-5.14.0-427.59.1.el9_4
- Red Hat Enterprise Linux AppStream EUS (v.9.4) kernel-64k-debug-devel-5.14.0-427.59.1.el9_4, kernel-64k-debug-devel-matched-5.14.0-427.59.1.el9_4, kernel-64k-devel-5.14.0-427.59.1.el9_4 +11
- Red Hat Enterprise Linux BaseOS EUS (v.9.4) bpftool-7.3.0-427.59.1.el9_4, kernel-5.14.0-427.59.1.el9_4, kernel-64k-5.14.0-427.59.1.el9_4 +29
- Red Hat Enterprise Linux Real Time EUS (v.9.4) kernel-rt-5.14.0-427.59.1.el9_4, kernel-rt-core-5.14.0-427.59.1.el9_4, kernel-rt-debug-5.14.0-427.59.1.el9_4 +9
- Red Hat Enterprise Linux Real Time for NFV EUS (v.9.4) kernel-rt-5.14.0-427.59.1.el9_4, kernel-rt-core-5.14.0-427.59.1.el9_4, kernel-rt-debug-5.14.0-427.59.1.el9_4 +11
- RHSA-2025:2489 Released 2025-03-10 · Red Hat rating Importantkernel security update
- Red Hat Enterprise Linux BaseOS AUS (v.8.6) bpftool-4.18.0-372.141.1.el8_6, kernel-4.18.0-372.141.1.el8_6, kernel-abi-stablelists-4.18.0-372.141.1.el8_6 +14
- Red Hat Enterprise Linux BaseOS E4S (v.8.6) bpftool-4.18.0-372.141.1.el8_6, kernel-4.18.0-372.141.1.el8_6, kernel-abi-stablelists-4.18.0-372.141.1.el8_6 +19
- Red Hat Enterprise Linux BaseOS TUS (v.8.6) bpftool-4.18.0-372.141.1.el8_6, kernel-4.18.0-372.141.1.el8_6, kernel-abi-stablelists-4.18.0-372.141.1.el8_6 +14
- RHSA-2025:2475 Released 2025-03-10 · Red Hat rating Importantkernel security update
- Red Hat CodeReady Linux Builder EUS (v.9.2) kernel-tools-libs-devel-5.14.0-284.108.1.el9_2
- Red Hat Enterprise Linux AppStream EUS (v.9.2) kernel-64k-debug-devel-5.14.0-284.108.1.el9_2, kernel-64k-debug-devel-matched-5.14.0-284.108.1.el9_2, kernel-64k-devel-5.14.0-284.108.1.el9_2 +10
- Red Hat Enterprise Linux BaseOS EUS (v.9.2) bpftool-7.0.0-284.108.1.el9_2, kernel-5.14.0-284.108.1.el9_2, kernel-64k-5.14.0-284.108.1.el9_2 +29
- RHSA-2025:2476 Released 2025-03-10 · Red Hat rating Importantkernel-rt security update
- Red Hat Enterprise Linux Real Time EUS (v.9.2) kernel-rt-5.14.0-284.108.1.rt14.393.el9_2, kernel-rt-core-5.14.0-284.108.1.rt14.393.el9_2, kernel-rt-debug-5.14.0-284.108.1.rt14.393.el9_2 +9
- Red Hat Enterprise Linux Real Time for NFV EUS (v.9.2) kernel-rt-5.14.0-284.108.1.rt14.393.el9_2, kernel-rt-core-5.14.0-284.108.1.rt14.393.el9_2, kernel-rt-debug-5.14.0-284.108.1.rt14.393.el9_2 +11
- RHSA-2025:2473 Released 2025-03-10 · Red Hat rating Importantkernel security update
- Red Hat Enterprise Linux BaseOS (v. 8) bpftool-4.18.0-553.44.1.el8_10, kernel-4.18.0-553.44.1.el8_10, kernel-abi-stablelists-4.18.0-553.44.1.el8_10 +19
- Red Hat Enterprise Linux CRB (v. 8) kernel-tools-libs-devel-4.18.0-553.44.1.el8_10
- RHSA-2025:2474 Released 2025-03-10 · Red Hat rating Importantkernel-rt security update
- Red Hat Enterprise Linux NFV (v. 8) kernel-rt-4.18.0-553.44.1.rt7.385.el8_10, kernel-rt-core-4.18.0-553.44.1.rt7.385.el8_10, kernel-rt-debug-4.18.0-553.44.1.rt7.385.el8_10 +9
- Red Hat Enterprise Linux RT (v. 8) kernel-rt-4.18.0-553.44.1.rt7.385.el8_10, kernel-rt-core-4.18.0-553.44.1.rt7.385.el8_10, kernel-rt-debug-4.18.0-553.44.1.rt7.385.el8_10 +7
Vendor assessments
Red Hat
Red Hat rating: Important. Red Hat's page for this CVE →
| Product | Status | Plan or fix |
|---|---|---|
| Red Hat CodeReady Linux Builder (v. 9) | Fixed | RHSA-2025:2627 |
| Red Hat CodeReady Linux Builder EUS (v.8.8) | Fixed | RHSA-2025:2525 |
| Red Hat CodeReady Linux Builder EUS (v.9.2) | Fixed | RHSA-2025:2475 |
| Red Hat CodeReady Linux Builder EUS (v.9.4) | Fixed | RHSA-2025:2490 |
| Red Hat Enterprise Linux AppStream (v. 9) | Fixed | RHSA-2025:2627 |
| Red Hat Enterprise Linux AppStream E4S (v.9.0) | Fixed | RHSA-2025:2488 |
| Red Hat Enterprise Linux AppStream EUS (v.9.2) | Fixed | RHSA-2025:2475 |
| Red Hat Enterprise Linux AppStream EUS (v.9.4) | Fixed | RHSA-2025:2490 |
| Red Hat Enterprise Linux BaseOS (v. 8) | Fixed | RHSA-2025:2473 |
| Red Hat Enterprise Linux BaseOS (v. 9) | Fixed | RHSA-2025:2627 |
| Red Hat Enterprise Linux BaseOS AUS (v. 8.2) | Fixed | RHSA-2025:2646 |
| Red Hat Enterprise Linux BaseOS AUS (v.8.4) | Fixed | RHSA-2025:2528 |
| Red Hat Enterprise Linux BaseOS AUS (v.8.6) | Fixed | RHSA-2025:2489 |
| Red Hat Enterprise Linux BaseOS E4S (v.8.4) | Fixed | RHSA-2025:2528 |
| Red Hat Enterprise Linux BaseOS E4S (v.8.6) | Fixed | RHSA-2025:2489 |
| Red Hat Enterprise Linux BaseOS E4S (v.9.0) | Fixed | RHSA-2025:2488 |
| Red Hat Enterprise Linux BaseOS EUS (v.8.8) | Fixed | RHSA-2025:2525 |
| Red Hat Enterprise Linux BaseOS EUS (v.9.2) | Fixed | RHSA-2025:2475 |
| Red Hat Enterprise Linux BaseOS EUS (v.9.4) | Fixed | RHSA-2025:2490 |
| Red Hat Enterprise Linux BaseOS TUS (v.8.4) | Fixed | RHSA-2025:2528 |
| Red Hat Enterprise Linux BaseOS TUS (v.8.6) | Fixed | RHSA-2025:2489 |
| Red Hat Enterprise Linux CRB (v. 8) | Fixed | RHSA-2025:2473 |
| Red Hat Enterprise Linux NFV (v. 8) | Fixed | RHSA-2025:2474 |
| Red Hat Enterprise Linux NFV E4S (v.9.0) | Fixed | RHSA-2025:2512 |
| Red Hat Enterprise Linux NFV TUS (v.8.4) | Fixed | RHSA-2025:2524 |
| Red Hat Enterprise Linux RT (v. 8) | Fixed | RHSA-2025:2474 |
| Red Hat Enterprise Linux RT TUS (v.8.4) | Fixed | RHSA-2025:2524 |
| Red Hat Enterprise Linux Real Time (v. 9) | Fixed | RHSA-2025:2627 |
| Red Hat Enterprise Linux Real Time E4S (v.9.0) | Fixed | RHSA-2025:2512 |
| Red Hat Enterprise Linux Real Time EUS (v.9.2) | Fixed | RHSA-2025:2476 |
| Red Hat Enterprise Linux Real Time EUS (v.9.4) | Fixed | RHSA-2025:2490 |
| Red Hat Enterprise Linux Real Time for NFV (v. 9) | Fixed | RHSA-2025:2627 |
| Red Hat Enterprise Linux Real Time for NFV EUS (v.9.2) | Fixed | RHSA-2025:2476 |
| Red Hat Enterprise Linux Real Time for NFV EUS (v.9.4) | Fixed | RHSA-2025:2490 |
| Red Hat Enterprise Linux Server (v. 7 ELS) | Fixed | RHSA-2025:2501 |
| Red Hat Enterprise Linux Server -EXTENSION(v. 6 ELS-EXTENSION) | Fixed | RHSA-2025:2517 |
| Red Hat Enterprise Linux Server AUS (v. 7.7) | Fixed | RHSA-2025:2514 |
| Red Hat Enterprise Linux Server Optional (v. 7 ELS) | Fixed | RHSA-2025:2501 |
| Red Hat Enterprise Linux Server Optional -EXTENSION (v. 6 ELS -EXTENSION) | Fixed | RHSA-2025:2517 |
| Red Hat Enterprise Linux Server Optional AUS (v. 7.7) | Fixed | RHSA-2025:2514 |
| Red Hat Enterprise Linux for Real Time (v. 7 ELS) | Fixed | RHSA-2025:2510 |
| Red Hat OpenShift Container Platform 4.12 | Fixed | RHSA-2025:3573 |
| Red Hat OpenShift Container Platform 4.13 | Fixed | RHSA-2025:2701 |
| Red Hat OpenShift Container Platform 4.14 | Fixed | RHSA-2025:2710 |
| Red Hat OpenShift Container Platform 4.15 | Fixed | RHSA-2025:3055 |
| Red Hat OpenShift Container Platform 4.16 | Fixed | RHSA-2025:3301 |
| Red Hat OpenShift Container Platform 4.17 | Fixed | RHSA-2025:2696 |
| Red Hat OpenShift Container Platform 4.18 | Fixed | RHSA-2025:2705 |
Not affected: 8 products
- Red Hat Enterprise Linux 10
- Red Hat OpenShift Container Platform 4.12
- Red Hat OpenShift Container Platform 4.13
- Red Hat OpenShift Container Platform 4.14
- Red Hat OpenShift Container Platform 4.15
- Red Hat OpenShift Container Platform 4.16
- Red Hat OpenShift Container Platform 4.17
- Red Hat OpenShift Container Platform 4.18
Timeline
- 2025-04-09 Added to CISA KEV
- 2026-10-02 Threatist record created from CVE-2024-53197
- 2026-10-03 Alias added: GHSA-5244-qm9f-xx43
- 2026-10-04 EPSS moved to the 90th–95th percentile
- 2026-10-09 Affected versions changed · Red Hat
References
Patch 9
- https://git.kernel.org/stable/c/0b4ea4bfe16566b84645ded1403756a2dc4e0f19
- https://git.kernel.org/stable/c/9b8460a2a7ce478e0b625af7c56d444dc24190f7
- https://git.kernel.org/stable/c/62dc01c83fa71e10446ee4c31e0e3d5d1291e865
- https://git.kernel.org/stable/c/9887d859cd60727432a01564e8f91302d361b72b
- https://git.kernel.org/stable/c/920a369a9f014f10ec282fd298d0666129379f1b
- https://git.kernel.org/stable/c/b8f8b81dabe52b413fe9e062e8a852c48dd0680d
- https://git.kernel.org/stable/c/379d3b9799d9da953391e973b934764f01e03960
- https://git.kernel.org/stable/c/b521b53ac6eb04e41c03f46f7fe452e4d8e9bcca
- https://git.kernel.org/stable/c/b909df18ce2a998afef81d58bbd1a05dc0788c40
More Linux Kernel vulnerabilities
- TI-2025-26358 tls: fix handling of zero-length records on the rx_list KEVCVSS 3.1CRITICAL 9.8
- TI-2026-38352 netfilter: bridge: make ebt_snat ARP rewrite writable KEVCVSS 3.1HIGH 8.8
- TI-2013-05264 The (1) get_user and (2) put_user API functions in the Linux kernel before 3.5.5 on the… KEVCVSS 3.1HIGH 8.8
- TI-2022-00125 Integer overflow in kernel KEVCVSS 3.1HIGH 8.4
- TI-2013-01864 The perf_swevent_init function in kernel/events/core.c in the Linux kernel before 3.8.9… KEVCVSS 3.1HIGH 8.4
- TI-2021-05514 Heap Out-Of-Bounds Write in Netfilter IP6T_SO_SET_REPLACE KEVCVSS 3.1HIGH 8.3
Sources
- CVE-2024-53197 · CVE Program
- CVE-2024-53197 · NVD
- CISA Known Exploited Vulnerabilities
- FIRST EPSS
- GHSA-5244-qm9f-xx43 · GitHub Advisory Database · CC BY 4.0
- CVE-2024-53197 · Red Hat security data · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences