Início
Início
Tendências
Tendências
Vulnerabilidades
Vulnerabilidades
Notícias
Notícias
Pesquisadores
Pesquisadores
Por que dbugs?
Por que dbugs?
Configurações

Cezary Rojewski

Pesquisador deIntel
#24954de 60,403
11CVSS total
Vulnerabilidades · 2
Média
2
PT-2023-9383
2023-10-06
5.5
CVE-2023-52806
Linux
Linux Kernel
The issue is related to a null pointer dereference error in the ALSA component of the Linux kernel. This error occurs when assigning a stream, particularly when a user attempts to assign a COUPLED stream, which is not blocked by AudioDSP drivers. The supplied substream instance may be a stub, leading to a null pointer dereference when code-loading. This could allow an attacker to cause a denial of service.
PT-2023-9729
2023-01-23
5.5
CVE-2023-52736
Linux
Linux Kernel
The issue is related to the ALSA hda component of the Linux kernel, where unsetting the preset in `snd hda codec cleanup for unbind()` interferes with the module unload and load scenario, causing a null pointer dereference. This occurs because the `snd hda codec device new()` function expects a valid pointer to an instance of `struct snd card`, which can only be met once sound card components probing commences. The `preset` is assigned only once during device/driver matching, and the ASoC codec driver's module reloading may occur several times throughout the lifetime of an audio stack.