PT-2023-9729

CVE-2023-52736

·

Publicado

2023-01-23

·

Atualizado

2026-07-28

Descrição por

CVSS 3.1
5.5
Média
MétricasAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description The issue is related to the ALSA hda component of the Linux kernel, where unsetting the preset in snd hda codec cleanup for unbind() interferes with the module unload and load scenario, causing a null pointer dereference. This occurs because the snd hda codec device new() function expects a valid pointer to an instance of struct snd card, which can only be met once sound card components probing commences. The preset is assigned only once during device/driver matching, and the ASoC codec driver's module reloading may occur several times throughout the lifetime of an audio stack.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Explorabilidade
Exploit
Impactos
Pesquisadores
Fornecedores
Produtos afetados
Enumeração de fraquezas
Identificadores relacionados
CLSA-2026-1782151303
OESA-2024-1693
OPENSUSE-SU-2024_2189-1
SUSE-SU-2024:2008-1
SUSE-SU-2024:2011-1
SUSE-SU-2024:2019-1
SUSE-SU-2024:2189-1
SUSE-SU-2024:2190-1
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾