PT-2023-9729

CVE-2023-52736

·

تاريخ النشر

2023-01-23

·

تاريخ التحديث

2026-07-28

الوصف من

CVSS 3.1
5.5
متوسطة
المقاييسAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description The issue is related to the ALSA hda component of the Linux kernel, where unsetting the preset in snd hda codec cleanup for unbind() interferes with the module unload and load scenario, causing a null pointer dereference. This occurs because the snd hda codec device new() function expects a valid pointer to an instance of struct snd card, which can only be met once sound card components probing commences. The preset is assigned only once during device/driver matching, and the ASoC codec driver's module reloading may occur several times throughout the lifetime of an audio stack.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
قابلية الاستغلال
استغلال
التأثيرات
الباحثون
المورّدون
المنتجات المتأثرة
تصنيف نقاط الضعف
المعرّفات ذات الصلة
CLSA-2026-1782151303
OESA-2024-1693
OPENSUSE-SU-2024_2189-1
SUSE-SU-2024:2008-1
SUSE-SU-2024:2011-1
SUSE-SU-2024:2019-1
SUSE-SU-2024:2189-1
SUSE-SU-2024:2190-1
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾