vulnerability

Red Hat OpenShift: CVE-2024-53197: kernel: ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices

Try Surface Command
Back to search
Severity
5
CVSS
(AV:L/AC:L/Au:S/C:N/I:N/A:C)
Published
Dec 27, 2024
Added
Mar 19, 2025
Modified
Apr 14, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices

A bogus device can provide a bNumConfigurations value that exceeds the
initial value used in usb_get_configuration for allocating dev->config.

This can lead to out-of-bounds accesses later, e.g. in
usb_destroy_configuration.

Solution

linuxrpm-upgrade-rhcos

References

Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.

Try it today