Linux Kernel: 2 exploited vulnerabilities (CVE-2024-53150, CVE-2024-53197)
Linux Kernel
CVE-2024-53150: Linux Kernel contains an out-of-bounds read vulnerability in the USB-audio driver that allows a local, privileged attacker to obtain potentially sensitive information. CVE-2024-53197: Linux Kernel contains an out-of-bounds access vulnerability in the USB-audio driver that allows an attacker with physical access to the system to use a malicious USB device to potentially manipulate system memory, escalate privileges, or execute arbitrary code. Added to CISA KEV on 2025-04-09.
Why this severity: CVSS 7.8 (CISA ADP, v3.1); actively exploited (CISA KEV)
- Started
- Apr 9, 2025
- Closed
- Apr 9, 2025
Affected
- See vendor advisory / CISA notes (versions not always listed in KEV feed)
Fixed in
- See vendor advisory linked in sources
Timeline2
CISA added CVE-2024-53150 to the KEV catalog (due 2025-04-30).
CISA added CVE-2024-53197 to the KEV catalog (due 2025-04-30).
Advisories6
Notes & caveats
Derived from CISA KEV JSON feed catalogVersion 2026.10.21. CVSS from the CVE record (cvelistV5). Exact affected/fixed version strings are not always in the KEV record; verify against the vendor advisory URL. startedAt uses dateAdded (exploitation may have begun earlier; many entries are older CVEs newly confirmed as exploited in 2025).
Get an email when a new major security incident drops. No spam, unsubscribe any time.
