{"id":"CVE-2023-52904","state":"PUBLISHED","title":"ALSA: usb-audio: Fix possible NULL pointer dereference in snd_usb_pcm_has_fixed_rate()","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nALSA: usb-audio: Fix possible NULL pointer dereference in snd_usb_pcm_has_fixed_rate()\n\nThe subs function argument may be NULL, so do not use it before the NULL check.","publishedAt":"2024-08-21T06:10:44.960Z","updatedAt":"2026-05-11T19:35:14.512Z","severity":null,"assigner":"Linux","products":["Linux Linux"],"affected":[{"vendor":"Linux","product":"Linux","defaultStatus":"unaffected","versions":[{"version":"bfd36b1d1869859af7ba94dc95ec05e74f40d0b7","status":"affected","lessThan":"f57204edc10760c935d8d36ea999dc8acf018030","versionType":"git"},{"version":"e1e0a181aea375edfae2f9a59070f95d904980d1","status":"affected","lessThan":"a474d4ad59cd4642d1b7e3a6c08cef9eca0992c8","versionType":"git"},{"version":"291e9da91403e0e628d7692b5ed505100e7b7706","status":"affected","lessThan":"92a9c0ad86d47ff4cce899012e355c400f02cfb8","versionType":"git"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["sound/usb/pcm.c"]},{"vendor":"Linux","product":"Linux","defaultStatus":"unaffected","versions":[{"version":"5.15.152","status":"affected","lessThan":"5.15.168","versionType":"semver"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["sound/usb/pcm.c"]}],"references":["https://git.kernel.org/stable/c/f57204edc10760c935d8d36ea999dc8acf018030","https://git.kernel.org/stable/c/a474d4ad59cd4642d1b7e3a6c08cef9eca0992c8","https://git.kernel.org/stable/c/92a9c0ad86d47ff4cce899012e355c400f02cfb8"],"weaknesses":[],"ingestedAt":"2026-10-29T20:06:33.064Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2023/52xxx/CVE-2023-52904.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2023-52904","state":"PUBLISHED","datePublished":"2024-08-21T06:10:44.960Z","dateUpdated":"2026-05-11T19:35:14.512Z","assignerShortName":"Linux","assignerOrgId":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","dateReserved":"2024-08-21T06:07:11.014Z"},"containers":{"cna":{"title":"ALSA: usb-audio: Fix possible NULL pointer dereference in snd_usb_pcm_has_fixed_rate()","descriptions":[{"lang":"en","value":"In the Linux kernel, the following vulnerability has been resolved:\n\nALSA: usb-audio: Fix possible NULL pointer dereference in snd_usb_pcm_has_fixed_rate()\n\nThe subs function argument may be NULL, so do not use it before the NULL check."}],"affected":[{"vendor":"Linux","product":"Linux","defaultStatus":"unaffected","versions":[{"version":"bfd36b1d1869859af7ba94dc95ec05e74f40d0b7","status":"affected","lessThan":"f57204edc10760c935d8d36ea999dc8acf018030","versionType":"git"},{"version":"e1e0a181aea375edfae2f9a59070f95d904980d1","status":"affected","lessThan":"a474d4ad59cd4642d1b7e3a6c08cef9eca0992c8","versionType":"git"},{"version":"291e9da91403e0e628d7692b5ed505100e7b7706","status":"affected","lessThan":"92a9c0ad86d47ff4cce899012e355c400f02cfb8","versionType":"git"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["sound/usb/pcm.c"]},{"vendor":"Linux","product":"Linux","defaultStatus":"unaffected","versions":[{"version":"5.15.152","status":"affected","lessThan":"5.15.168","versionType":"semver"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["sound/usb/pcm.c"]}],"references":[{"url":"https://git.kernel.org/stable/c/f57204edc10760c935d8d36ea999dc8acf018030"},{"url":"https://git.kernel.org/stable/c/a474d4ad59cd4642d1b7e3a6c08cef9eca0992c8"},{"url":"https://git.kernel.org/stable/c/92a9c0ad86d47ff4cce899012e355c400f02cfb8"}],"providerMetadata":{"shortName":"Linux","orgId":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","dateUpdated":"2026-05-11T19:35:14.512Z"},"cpeApplicability":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"5.15.152","versionEndExcluding":"5.15.168"}]}]}],"x_generator":{"engine":"bippy-1.2.0"}},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2023-52904","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2024-09-10T16:03:17.931881Z"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2024-09-12T17:33:17.251Z"}}]}}}