Skip to main content
CVE-2024-53150VulnerabilityPublished Updated

Red Hat Security Advisory: kernel security update

Affects Linux kernelSource GCVE Database

0
Compare

Exploited in the wild · KEV due 30 Apr 2025 : apply the vendor's fix or mitigations to Linux kernel now.

Data as of 5 Nov 2026, 14:22 UTC

Exploitation

Actively exploited

Medium severity · No CVSS score from NVD or the CNA

KEV deadline
 US federal agencies must patch by this date; a sensible deadline for everyone else. Other KEV due dates

Exploitation evidence

t = 0 is the CVE’s publication on cve.org

  1. Disclosed: evidence found.

    CVE published 15 Apr 2025

  2. Detectable: no evidence on record.

    No public nuclei template indexed

  3. Weaponized: no evidence on record.

    No public exploit code indexed in Metasploit or Exploit-DB

  4. Exploited in the wild: evidence found.

    Listed in CISA KEV 6 days before disclosure

  5. Observed by OffSeq Mirage: no evidence on record.

    No attack traffic recorded by OffSeq Mirage sensors

Timeline

  1. , 6 days before disclosure

  2. CVE published

    on cve.org

    , t = 0

  3. KEV remediation due

    US federal deadline

    , 15 days after disclosure

A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), CISA KEV (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 5 Nov 2026.

What to do

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Description

A moderate severity security vulnerability (CVE-2024-53150) in the Linux kernel's ALSA usb-audio component causes out-of-bounds reads when finding clock sources. This flaw affects Red Hat Enterprise Linux 7 Extended Lifecycle Support kernel packages. A security update is available from Red Hat to fix this issue, and systems must be rebooted after applying the update.

References

Community reviews

Loading reviews…