Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2023-52806

ALSA: hda: Fix possible null-ptr-deref when assigning a stream

Description

In the Linux kernel, the following vulnerability has been resolved: ALSA: hda: Fix possible null-ptr-deref when assigning a stream While AudioDSP drivers assign streams exclusively of HOST or LINK type, nothing blocks a user to attempt to assign a COUPLED stream. As supplied substream instance may be a stub, what is the case when code-loading, such scenario ends with null-ptr-deref.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 14752412721c61d9ac1e8d8fb51d7148cb15f85b to < 7de25112de8222fd20564769e6c99dc9f9738a0baffected
  • 14752412721c61d9ac1e8d8fb51d7148cb15f85b to < 758c7733cb821041f5fd403b7b97c0b95d319323affected
  • 14752412721c61d9ac1e8d8fb51d7148cb15f85b to < 2527775616f3638f4fd54649eba8c7b84d5e4250affected
  • 14752412721c61d9ac1e8d8fb51d7148cb15f85b to < 25354bae4fc310c3928e8a42fda2d486f67745d7affected
  • 14752412721c61d9ac1e8d8fb51d7148cb15f85b to < 631a96e9eb4228ff75fce7e72d133ca81194797eaffected
  • 14752412721c61d9ac1e8d8fb51d7148cb15f85b to < 43b91df291c8802268ab3cfd8fccfdf135800ed4affected
  • 14752412721c61d9ac1e8d8fb51d7148cb15f85b to < fe7c1a0c2b25c82807cb46fc3aadbf2664a682b0affected
  • 14752412721c61d9ac1e8d8fb51d7148cb15f85b to < 4a320da7f7cbdab2098b103c47f45d5061f42eddaffected
  • 14752412721c61d9ac1e8d8fb51d7148cb15f85b to < f93dc90c2e8ed664985e366aa6459ac83cdab236affected

Linux Linux

Default version status: affected

  • 4.2affected
  • 0 to < 4.2unaffected
  • 4.14.331 to ≤ 4.14.*unaffected
  • 4.19.300 to ≤ 4.19.*unaffected
  • 5.4.262 to ≤ 5.4.*unaffected
  • 5.10.202 to ≤ 5.10.*unaffected
  • 5.15.140 to ≤ 5.15.*unaffected
  • 6.1.64 to ≤ 6.1.*unaffected
  • 6.5.13 to ≤ 6.5.*unaffected
  • 6.6.3 to ≤ 6.6.*unaffected
  • 6.7 to ≤ *unaffected

References