Skip to content
CVE PROGRAM SOURCE RECORD5.5 Medium

CVE-2023-53400

ALSA: hda: Fix Oops by 9.1 surround channel names

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: ALSA: hda: Fix Oops by 9.1 surround channel names get_line_out_pfx() may trigger an Oops by overflowing the static array with more than 8 channels. This was reported for MacBookPro 12,1 with Cirrus codec. As a workaround, extend for the 9.1 channels and also fix the potential Oops by unifying the code paths accessing the same array with the proper size check.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 247d85ee068610c50d66ee0cd3130e02c69f5f2e to < 082dcd51667b29097500c824c37f24da997a6a8aaffected
  • 247d85ee068610c50d66ee0cd3130e02c69f5f2e to < b5694aae4c2d9a288bafce7d38f122769e0428e6affected
  • 247d85ee068610c50d66ee0cd3130e02c69f5f2e to < 4ef155ddf9578bf035964d58739fdcd7dd44b4a4affected
  • 247d85ee068610c50d66ee0cd3130e02c69f5f2e to < 546b1f5f45a355ae0d3a8041cdaca597dfcac825affected
  • 247d85ee068610c50d66ee0cd3130e02c69f5f2e to < e8c7d7c43d5edd20e518fe1dfb2371d1fe6e8bb8affected
  • 247d85ee068610c50d66ee0cd3130e02c69f5f2e to < dc8c569d59f17b17d7bca4f68c36bd571659921eaffected
  • 247d85ee068610c50d66ee0cd3130e02c69f5f2e to < fcf637461019e9a5a0c12fc5c42a9db1779b0634affected
  • 247d85ee068610c50d66ee0cd3130e02c69f5f2e to < 3b44ec8c5c44790a82f07e90db45643c762878c6affected

Linux Linux

Default version status: affected

  • 3.9affected
  • 0 to < 3.9unaffected
  • 4.14.316 to ≤ 4.14.*unaffected
  • 4.19.284 to ≤ 4.19.*unaffected
  • 5.4.244 to ≤ 5.4.*unaffected
  • 5.10.181 to ≤ 5.10.*unaffected
  • 5.15.113 to ≤ 5.15.*unaffected
  • 6.1.30 to ≤ 6.1.*unaffected
  • 6.3.4 to ≤ 6.3.*unaffected
  • 6.4 to ≤ *unaffected

References