الرئيسية
الرئيسية
الاتجاهات
الاتجاهات
الثغرات
الثغرات
الأخبار
الأخبار
الباحثون
الباحثون
لماذا dbugs؟
لماذا dbugs؟
الإعدادات

Cezary Rojewski

باحث منIntel
#24954من 60,403
11إجمالي CVSS
الثغرات · 2
متوسطة
2
PT-2023-9383
2023-10-06
5.5
CVE-2023-52806
Linux
Linux Kernel
The issue is related to a null pointer dereference error in the ALSA component of the Linux kernel. This error occurs when assigning a stream, particularly when a user attempts to assign a COUPLED stream, which is not blocked by AudioDSP drivers. The supplied substream instance may be a stub, leading to a null pointer dereference when code-loading. This could allow an attacker to cause a denial of service.
PT-2023-9729
2023-01-23
5.5
CVE-2023-52736
Linux
Linux Kernel
The issue is related to the ALSA hda component of the Linux kernel, where unsetting the preset in `snd hda codec cleanup for unbind()` interferes with the module unload and load scenario, causing a null pointer dereference. This occurs because the `snd hda codec device new()` function expects a valid pointer to an instance of `struct snd card`, which can only be met once sound card components probing commences. The `preset` is assigned only once during device/driver matching, and the ASoC codec driver's module reloading may occur several times throughout the lifetime of an audio stack.