高危
Linux Kernel sound/usb/quirks.c信息泄露漏洞
2024-12-27 13:49:39 公开 ，2026-02-28 07:28:58 更新
- CISA KEV
- 关键漏洞
- 开源组件漏洞
- CWE Top 25 (2023)
- CWE Top 25 (2024)
- 本地
- 公开PoC
- CWEs：
- CWE-787 （Out-of-bounds Write）
- SSVC：
- 可利用状态：已被积极利用攻击自动化：否技术影响评估：全部 2025-04-10 02:17:11
风险信息
- CVSS v3.1 向量
- AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- CVSS v3.1 风险值
- 7.8
详细信息
- 漏洞类型
- 其他
- 漏洞描述
- Linux Kernel sound/usb/quirks.c存在安全漏洞，虚假设备通过提供超过usb_get_configuration中用于分配dev->config的初始值，导致usb-audio模块中Extigy和Mbox设备潜在的越界访问。
- 修复建议
- 当前厂商已发布了补丁信息，请及时关注更新： https://lore.kernel.org/linux-cve-announce/2024122725-CVE-2024-53197-6aef@gregkh/
参考链接
- https://android.googlesource.com/kernel/common/+/5486704a6a0c592692efe67461dfa8db51fdc684
OSV
- https://android.googlesource.com/kernel/common/+/a84242054bec905a3c63d5701256a6f4af6bce81
OSV
- https://git.kernel.org/linus/b909df18ce2a998afef81d58bbd1a05dc0788c40
OSV
- https://git.kernel.org/stable/c/0b4ea4bfe16566b84645ded1403756a2dc4e0f19
CVE · Patch
- https://git.kernel.org/stable/c/379d3b9799d9da953391e973b934764f01e03960
CVE · Patch
- https://git.kernel.org/stable/c/62dc01c83fa71e10446ee4c31e0e3d5d1291e865
CVE · Patch
- https://git.kernel.org/stable/c/920a369a9f014f10ec282fd298d0666129379f1b
CVE · Patch
- https://git.kernel.org/stable/c/9887d859cd60727432a01564e8f91302d361b72b
CVE · Patch
- https://git.kernel.org/stable/c/9b8460a2a7ce478e0b625af7c56d444dc24190f7
CVE · Patch
- https://git.kernel.org/stable/c/b521b53ac6eb04e41c03f46f7fe452e4d8e9bcca
CVE · Patch
- https://git.kernel.org/stable/c/b8f8b81dabe52b413fe9e062e8a852c48dd0680d
CVE · Patch
- https://git.kernel.org/stable/c/b909df18ce2a998afef81d58bbd1a05dc0788c40
CVE · Patch
- https://osv.dev/vulnerability/ASB-A-382243530
OSV
- https://osv.dev/vulnerability/CVE-2024-53197
OSV
- https://osv.dev/vulnerability/UBUNTU-CVE-2024-53197
OSV
- https://security-tracker.debian.org/tracker/CVE-2024-53197
OSV
- https://source.android.com/security/bulletin/2025-04-01
OSV
- https://ubuntu.com/security/CVE-2024-53197
OSV
- https://ubuntu.com/security/notices/USN-7276-1
OSV
- https://ubuntu.com/security/notices/USN-7277-1
OSV
- https://ubuntu.com/security/notices/USN-7310-1
OSV
- https://ubuntu.com/security/notices/USN-7387-1
OSV
- https://ubuntu.com/security/notices/USN-7387-2
OSV
- https://ubuntu.com/security/notices/USN-7387-3
OSV
- https://ubuntu.com/security/notices/USN-7388-1
OSV
- https://ubuntu.com/security/notices/USN-7389-1
OSV
- https://ubuntu.com/security/notices/USN-7390-1
OSV
- https://ubuntu.com/security/notices/USN-7391-1
OSV
- https://ubuntu.com/security/notices/USN-7392-1
OSV
- https://ubuntu.com/security/notices/USN-7392-2
OSV
- https://ubuntu.com/security/notices/USN-7392-3
OSV
- https://ubuntu.com/security/notices/USN-7392-4
OSV
- https://ubuntu.com/security/notices/USN-7393-1
OSV
- https://ubuntu.com/security/notices/USN-7401-1
OSV
- https://ubuntu.com/security/notices/USN-7407-1
OSV
- https://ubuntu.com/security/notices/USN-7413-1
OSV
- https://www.cve.org/CVERecord?id=CVE-2024-53197
OSV
- https://ubuntu.com/security/notices/USN-7421-1
OSV
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog
OSV
- https://ubuntu.com/security/notices/USN-7449-1
OSV
- https://ubuntu.com/security/notices/USN-7450-1
OSV
- https://ubuntu.com/security/notices/USN-7451-1
OSV
- https://ubuntu.com/security/notices/USN-7452-1
OSV
- https://ubuntu.com/security/notices/USN-7453-1
OSV
- https://ubuntu.com/security/notices/USN-7458-1
OSV
- https://ubuntu.com/security/notices/USN-7459-1
OSV
- https://ubuntu.com/security/notices/USN-7463-1
OSV
- https://ubuntu.com/security/notices/USN-7449-2
OSV
- https://ubuntu.com/security/notices/USN-7459-2
OSV
- https://ubuntu.com/security/notices/USN-7468-1
OSV
- https://ubuntu.com/security/notices/USN-7523-1
OSV
- https://ubuntu.com/security/notices/USN-7524-1
OSV
- https://ubuntu.com/security/notices/USN-7539-1
OSV
- https://ubuntu.com/security/notices/USN-7540-1
OSV
- https://ubuntu.com/security/notices/USN-7607-1
OSV
- https://ubuntu.com/security/notices/USN-7607-2
OSV
- https://ubuntu.com/security/notices/USN-7607-3
OSV
- https://ubuntu.com/security/notices/USN-7627-1
OSV
- https://ubuntu.com/security/notices/USN-7627-2
OSV
- https://docs.bell-sw.com/security/cves/CVE-2024-53197
OSV
- https://osv.dev/vulnerability/BELL-CVE-2024-53197
OSV
- https://osv.dev/vulnerability/DEBIAN-CVE-2024-53197
OSV
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
OSV
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-53197
OSV · US Government Resource
- https://lists.debian.org/debian-lts-announce/2025/03/msg00001.html
OSV · Mailing List
- https://lists.debian.org/debian-lts-announce/2025/03/msg00002.html
OSV · Mailing List
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/53xxx/CVE-2024-53197.json
OSV
- https://nvd.nist.gov/vuln/detail/CVE-2024-53197
OSV