CVE record · CVE-2024-56533

ALSA: usx2y: Use snd_card_free_when_closed() at disconnection

CVSS 5.5 MediumEPSS 0.0021 · 11th percentile

Published by the CVE Program (CNA: Linux) at 27 Dec 2024, 14:11 UTC. agentprime has not analysed this yet, so whether it affects any app is not known. This CVE names a vendor and product rather than a package, so the lockfile check doesn’t match it.

Affected products, as the CNA wrote them
Vendor	Product	Versions
Linux	Linux	affected 230cd5e24853ed4dd960461989b8ed0986d37a99 to before 24fe9f7ca83ec9acf765339054951f5cd9ae5c5d git affected 230cd5e24853ed4dd960461989b8ed0986d37a99 to before befcca1777525e37c659b4129d8ac7463b07ef67 git affected 230cd5e24853ed4dd960461989b8ed0986d37a99 to before 7bd8838c0ea886679a32834fdcacab296d072fbe git affected 230cd5e24853ed4dd960461989b8ed0986d37a99 to before e07605d855c4104d981653146a330ea48f6266ed git affected 230cd5e24853ed4dd960461989b8ed0986d37a99 to before ffbfc6c4330fc233698529656798bee44fea96f5 git affected 230cd5e24853ed4dd960461989b8ed0986d37a99 to before e869642a77a9b3b98b0ab2c8fec7af4385140909 git affected 230cd5e24853ed4dd960461989b8ed0986d37a99 to before dafb28f02be407e07a6f679e922a626592b481b0 git Other versions: unaffected
Linux	Linux	affected 2.6.13 unaffected before 2.6.13 semver unaffected 5.10.231 to 5.10., inclusive semver unaffected 5.15.174 to 5.15., inclusive semver unaffected 6.1.120 to 6.1., inclusive semver unaffected 6.6.64 to 6.6., inclusive semver unaffected 6.11.11 to 6.11., inclusive semver unaffected 6.12.2 to 6.12., inclusive semver unaffected 6.13 to *, inclusive original_commit_for_fix Other versions: affected

Identifiers: CVE-2024-56533
CNA: Linux
Weakness (CWE): CWE-667
Tags: Linux kernel
CWE-667
Published: 27 Dec 2024
Updated: 11 May 2026

Not analysed yet

We haven’t published our own analysis of this CVE. If a person reviews it, this page will say what’s affected and what has to be true for it to matter.

Severity and exploitation

Score	Rating	CVSS	Vector	Source
5.5	Medium	3.1	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	ADP (CISA-ADP)

CISA KEV Not listed.
EPSS 0.0021, the 11th percentile, on 6 Nov 2026: FIRST’s estimate of the chance of exploitation in the next 30 days.

Timeline

This record came from the full history of the CVE Program, published 27 Dec 2024. New records show when each source confirmed them.

Sources

References from the CNA

Facts on this page come from the CVE List as the CNA published them, with CVSS from the sources named above, CISA KEV and FIRST EPSS. Vendors, products and versions are shown as the CNA wrote them. We don’t reproduce the CVE’s description.