PT-2023-9729
CVE-2023-52736
·
تاريخ النشر
2023-01-23
·
تاريخ التحديث
2026-07-28
الوصف من
CVSS 3.1
5.5
متوسطةالمقاييسAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
The issue is related to the ALSA hda component of the Linux kernel, where unsetting the preset in
snd hda codec cleanup for unbind() interferes with the module unload and load scenario, causing a null pointer dereference. This occurs because the snd hda codec device new() function expects a valid pointer to an instance of struct snd card, which can only be met once sound card components probing commences. The preset is assigned only once during device/driver matching, and the ASoC codec driver's module reloading may occur several times throughout the lifetime of an audio stack.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
قابلية الاستغلال
استغلال
التأثيرات
الباحثون
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾