Home
Home
Trends
Trends
Vulnerabilities
Vulnerabilities
News
News
Researchers
Researchers
Why dbugs?
Why dbugs?
Settings

Cezary Rojewski

Researcher fromIntel
#24954of 60,403
11Total CVSS
Vulnerabilities · 2
Medium
2
PT-2023-9383
2023-10-06
5.5
CVE-2023-52806
Linux
Linux Kernel
The issue is related to a null pointer dereference error in the ALSA component of the Linux kernel. This error occurs when assigning a stream, particularly when a user attempts to assign a COUPLED stream, which is not blocked by AudioDSP drivers. The supplied substream instance may be a stub, leading to a null pointer dereference when code-loading. This could allow an attacker to cause a denial of service.
PT-2023-9729
2023-01-23
5.5
CVE-2023-52736
Linux
Linux Kernel
The issue is related to the ALSA hda component of the Linux kernel, where unsetting the preset in `snd hda codec cleanup for unbind()` interferes with the module unload and load scenario, causing a null pointer dereference. This occurs because the `snd hda codec device new()` function expects a valid pointer to an instance of `struct snd card`, which can only be met once sound card components probing commences. The `preset` is assigned only once during device/driver matching, and the ASoC codec driver's module reloading may occur several times throughout the lifetime of an audio stack.