PT-2023-9729
CVE-2023-52736
·
Publicado
2023-01-23
·
Atualizado
2026-07-28
Descrição por
CVSS 3.1
5.5
MédiaMétricasAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
The issue is related to the ALSA hda component of the Linux kernel, where unsetting the preset in
snd hda codec cleanup for unbind() interferes with the module unload and load scenario, causing a null pointer dereference. This occurs because the snd hda codec device new() function expects a valid pointer to an instance of struct snd card, which can only be met once sound card components probing commences. The preset is assigned only once during device/driver matching, and the ASoC codec driver's module reloading may occur several times throughout the lifetime of an audio stack.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Explorabilidade
Exploit
Impactos
Pesquisadores
Fornecedores
Produtos afetados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾