Your RSA-2048 keys break in 2030. Find every one of them before attackers do.
CISA KEV·Added 2025-04-09 — agencies required to remediate by 2025-04-30

CVE-2024-53197

HIGH

ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices

Also known asA-382243530ASB-A-382243530
Published
Dec 27, 2024
Updated
Apr 3, 2026
Affected
0 pkgs
Patched
None yet
Exploits
None indexed

EPSS Exploitation Probability

via FIRST.org ↗
2.0%probability of exploitation in next 30 days
Lower Risk84th percentile0.00%
1.08%1.69%2.30%2.91%1.8%2.0%Dec 25Apr 26Jun 26

EPSS (Exploit Prediction Scoring System) is a daily probability model maintained by FIRST.org. It estimates the likelihood a CVE will be exploited in production environments within the next 30 days, derived from real-world threat intelligence signals.

Description

In the Linux kernel, the following vulnerability has been resolved:

ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices

A bogus device can provide a bNumConfigurations value that exceeds the initial value used in usb_get_configuration for allocating dev->config.

This can lead to out-of-bounds accesses later, e.g. in usb_destroy_configuration.

Frequently Asked Questions

In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices A bogus device can provide a bNumConfigurations value that exceeds the initial value used in usb_get_configuration for allocating dev->config. This can lead to out-of-bounds accesses later, e.g. in usb_destroy_configuration.
O3 Security · Impact-Aware SCA

Is CVE-2024-53197 in your stack?

O3 detects CVE-2024-53197 across dependencies and uses function-level reachability to confirm whether the vulnerable code path is actually reachable — not just present. No false positives.

Scan my stack How O3 SCA works