PT-2023-9729
CVE-2023-52736
·
Published
2023-01-23
·
Updated
2026-07-28
Description by
CVSS 3.1
5.5
MediumMetricsAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
The issue is related to the ALSA hda component of the Linux kernel, where unsetting the preset in
snd hda codec cleanup for unbind() interferes with the module unload and load scenario, causing a null pointer dereference. This occurs because the snd hda codec device new() function expects a valid pointer to an instance of struct snd card, which can only be met once sound card components probing commences. The preset is assigned only once during device/driver matching, and the ASoC codec driver's module reloading may occur several times throughout the lifetime of an audio stack.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploitability
Exploit
Impacts
Researchers
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾