Apr 9, 2025

Started

• Closed✓Patched

  Linux Kernel: 2 exploited vulnerabilities (CVE-2024-53150, CVE-2024-53197)

  CVE-2024-53150: Linux Kernel contains an out-of-bounds read vulnerability in the USB-audio driver that allows a local, privileged attacker to obtain potentially sensitive information. CVE-2024-53197: Linux Kernel contains an out-of-bounds access vulnerability in the USB-audio driver that allows an attacker with physical access to the system to use a malicious USB device to potentially manipulate system memory, escalate privileges, or execute arbitrary code. Added to CISA KEV on 2025-04-09.

  Linux Kernel·Closed Apr 9, 2025·updated Apr 9, 2025