QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2024-53197

Back to search

CVE-2024-53197

Published: Dec 27, 2024

Modified: May 11, 2026

PUBLISHED

Description

In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices A bogus device can provide a bNumConfigurations value that exceeds the initial value used in usb_get_configuration for allocating dev->config. This can lead to out-of-bounds accesses later, e.g. in usb_destroy_configuration.

VendorProductVersions

Linux

Linux

affected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 - < 0b4ea4bfe16566b84645ded1403756a2dc4e0f19
affected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 - < 9b8460a2a7ce478e0b625af7c56d444dc24190f7
affected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 - < 62dc01c83fa71e10446ee4c31e0e3d5d1291e865
affected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 - < 9887d859cd60727432a01564e8f91302d361b72b
affected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 - < 920a369a9f014f10ec282fd298d0666129379f1b

+4 more versions

Linux

Linux

affected
2.6.12
unaffected
0 - < 2.6.12
unaffected
4.19.325 - <= 4.19.*
unaffected
5.4.287 - <= 5.4.*
unaffected
5.10.231 - <= 5.10.*

+6 more versions

References

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now