{"id":"CVE-2023-53648","state":"PUBLISHED","title":"ALSA: ac97: Fix possible NULL dereference in snd_ac97_mixer","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nALSA: ac97: Fix possible NULL dereference in snd_ac97_mixer\n\nsmatch error:\nsound/pci/ac97/ac97_codec.c:2354 snd_ac97_mixer() error:\nwe previously assumed 'rac97' could be null (see line 2072)\n\nremove redundant assignment, return error if rac97 is NULL.","publishedAt":"2025-10-07T15:19:45.780Z","updatedAt":"2026-05-11T19:49:13.426Z","severity":null,"assigner":"Linux","products":["Linux Linux"],"affected":[{"vendor":"Linux","product":"Linux","defaultStatus":"unaffected","versions":[{"version":"da3cec35dd3c31d8706db4bf379372ce70d92118","status":"affected","lessThan":"809af7bb4219bdeef0dbb8b2ed700d6516d13fe9","versionType":"git"},{"version":"da3cec35dd3c31d8706db4bf379372ce70d92118","status":"affected","lessThan":"e4cccff1e7ab6ea30995b6fbbb007d02647e025c","versionType":"git"},{"version":"da3cec35dd3c31d8706db4bf379372ce70d92118","status":"affected","lessThan":"5f13d67027fa782096e6aee0db5dce61c4aeb613","versionType":"git"},{"version":"da3cec35dd3c31d8706db4bf379372ce70d92118","status":"affected","lessThan":"f923a582217b198b557756809ffe42ac0fad6adb","versionType":"git"},{"version":"da3cec35dd3c31d8706db4bf379372ce70d92118","status":"affected","lessThan":"300e26e3e64880de5013eac8831cf44387ef752c","versionType":"git"},{"version":"da3cec35dd3c31d8706db4bf379372ce70d92118","status":"affected","lessThan":"d28b83252e150155b8b8c65b612c555e93c8b45f","versionType":"git"},{"version":"da3cec35dd3c31d8706db4bf379372ce70d92118","status":"affected","lessThan":"09baf460dfba79ee6a0c72e68ccdbbba84d894df","versionType":"git"},{"version":"da3cec35dd3c31d8706db4bf379372ce70d92118","status":"affected","lessThan":"228da1fa124470606ac19783e551f9d51a1e01b0","versionType":"git"},{"version":"da3cec35dd3c31d8706db4bf379372ce70d92118","status":"affected","lessThan":"79597c8bf64ca99eab385115743131d260339da5","versionType":"git"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["sound/pci/ac97/ac97_codec.c"]},{"vendor":"Linux","product":"Linux","defaultStatus":"affected","versions":[{"version":"2.6.28","status":"affected"},{"version":"0","status":"unaffected","lessThan":"2.6.28","versionType":"semver"},{"version":"4.14.322","status":"unaffected","lessThanOrEqual":"4.14.*","versionType":"semver"},{"version":"4.19.291","status":"unaffected","lessThanOrEqual":"4.19.*","versionType":"semver"},{"version":"5.4.251","status":"unaffected","lessThanOrEqual":"5.4.*","versionType":"semver"},{"version":"5.10.188","status":"unaffected","lessThanOrEqual":"5.10.*","versionType":"semver"},{"version":"5.15.121","status":"unaffected","lessThanOrEqual":"5.15.*","versionType":"semver"},{"version":"6.1.39","status":"unaffected","lessThanOrEqual":"6.1.*","versionType":"semver"},{"version":"6.3.13","status":"unaffected","lessThanOrEqual":"6.3.*","versionType":"semver"},{"version":"6.4.4","status":"unaffected","lessThanOrEqual":"6.4.*","versionType":"semver"},{"version":"6.5","status":"unaffected","lessThanOrEqual":"*","versionType":"original_commit_for_fix"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["sound/pci/ac97/ac97_codec.c"]}],"references":["https://git.kernel.org/stable/c/809af7bb4219bdeef0dbb8b2ed700d6516d13fe9","https://git.kernel.org/stable/c/e4cccff1e7ab6ea30995b6fbbb007d02647e025c","https://git.kernel.org/stable/c/5f13d67027fa782096e6aee0db5dce61c4aeb613","https://git.kernel.org/stable/c/f923a582217b198b557756809ffe42ac0fad6adb","https://git.kernel.org/stable/c/300e26e3e64880de5013eac8831cf44387ef752c","https://git.kernel.org/stable/c/d28b83252e150155b8b8c65b612c555e93c8b45f","https://git.kernel.org/stable/c/09baf460dfba79ee6a0c72e68ccdbbba84d894df","https://git.kernel.org/stable/c/228da1fa124470606ac19783e551f9d51a1e01b0","https://git.kernel.org/stable/c/79597c8bf64ca99eab385115743131d260339da5"],"weaknesses":[],"ingestedAt":"2026-10-29T20:06:33.064Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2023/53xxx/CVE-2023-53648.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2023-53648","state":"PUBLISHED","datePublished":"2025-10-07T15:19:45.780Z","dateUpdated":"2026-05-11T19:49:13.426Z","assignerShortName":"Linux","assignerOrgId":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","dateReserved":"2025-10-07T15:16:59.659Z"},"containers":{"cna":{"title":"ALSA: ac97: Fix possible NULL dereference in snd_ac97_mixer","descriptions":[{"lang":"en","value":"In the Linux kernel, the following vulnerability has been resolved:\n\nALSA: ac97: Fix possible NULL dereference in snd_ac97_mixer\n\nsmatch error:\nsound/pci/ac97/ac97_codec.c:2354 snd_ac97_mixer() error:\nwe previously assumed 'rac97' could be null (see line 2072)\n\nremove redundant assignment, return error if rac97 is NULL."}],"affected":[{"vendor":"Linux","product":"Linux","defaultStatus":"unaffected","versions":[{"version":"da3cec35dd3c31d8706db4bf379372ce70d92118","status":"affected","lessThan":"809af7bb4219bdeef0dbb8b2ed700d6516d13fe9","versionType":"git"},{"version":"da3cec35dd3c31d8706db4bf379372ce70d92118","status":"affected","lessThan":"e4cccff1e7ab6ea30995b6fbbb007d02647e025c","versionType":"git"},{"version":"da3cec35dd3c31d8706db4bf379372ce70d92118","status":"affected","lessThan":"5f13d67027fa782096e6aee0db5dce61c4aeb613","versionType":"git"},{"version":"da3cec35dd3c31d8706db4bf379372ce70d92118","status":"affected","lessThan":"f923a582217b198b557756809ffe42ac0fad6adb","versionType":"git"},{"version":"da3cec35dd3c31d8706db4bf379372ce70d92118","status":"affected","lessThan":"300e26e3e64880de5013eac8831cf44387ef752c","versionType":"git"},{"version":"da3cec35dd3c31d8706db4bf379372ce70d92118","status":"affected","lessThan":"d28b83252e150155b8b8c65b612c555e93c8b45f","versionType":"git"},{"version":"da3cec35dd3c31d8706db4bf379372ce70d92118","status":"affected","lessThan":"09baf460dfba79ee6a0c72e68ccdbbba84d894df","versionType":"git"},{"version":"da3cec35dd3c31d8706db4bf379372ce70d92118","status":"affected","lessThan":"228da1fa124470606ac19783e551f9d51a1e01b0","versionType":"git"},{"version":"da3cec35dd3c31d8706db4bf379372ce70d92118","status":"affected","lessThan":"79597c8bf64ca99eab385115743131d260339da5","versionType":"git"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["sound/pci/ac97/ac97_codec.c"]},{"vendor":"Linux","product":"Linux","defaultStatus":"affected","versions":[{"version":"2.6.28","status":"affected"},{"version":"0","status":"unaffected","lessThan":"2.6.28","versionType":"semver"},{"version":"4.14.322","status":"unaffected","lessThanOrEqual":"4.14.*","versionType":"semver"},{"version":"4.19.291","status":"unaffected","lessThanOrEqual":"4.19.*","versionType":"semver"},{"version":"5.4.251","status":"unaffected","lessThanOrEqual":"5.4.*","versionType":"semver"},{"version":"5.10.188","status":"unaffected","lessThanOrEqual":"5.10.*","versionType":"semver"},{"version":"5.15.121","status":"unaffected","lessThanOrEqual":"5.15.*","versionType":"semver"},{"version":"6.1.39","status":"unaffected","lessThanOrEqual":"6.1.*","versionType":"semver"},{"version":"6.3.13","status":"unaffected","lessThanOrEqual":"6.3.*","versionType":"semver"},{"version":"6.4.4","status":"unaffected","lessThanOrEqual":"6.4.*","versionType":"semver"},{"version":"6.5","status":"unaffected","lessThanOrEqual":"*","versionType":"original_commit_for_fix"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["sound/pci/ac97/ac97_codec.c"]}],"references":[{"url":"https://git.kernel.org/stable/c/809af7bb4219bdeef0dbb8b2ed700d6516d13fe9"},{"url":"https://git.kernel.org/stable/c/e4cccff1e7ab6ea30995b6fbbb007d02647e025c"},{"url":"https://git.kernel.org/stable/c/5f13d67027fa782096e6aee0db5dce61c4aeb613"},{"url":"https://git.kernel.org/stable/c/f923a582217b198b557756809ffe42ac0fad6adb"},{"url":"https://git.kernel.org/stable/c/300e26e3e64880de5013eac8831cf44387ef752c"},{"url":"https://git.kernel.org/stable/c/d28b83252e150155b8b8c65b612c555e93c8b45f"},{"url":"https://git.kernel.org/stable/c/09baf460dfba79ee6a0c72e68ccdbbba84d894df"},{"url":"https://git.kernel.org/stable/c/228da1fa124470606ac19783e551f9d51a1e01b0"},{"url":"https://git.kernel.org/stable/c/79597c8bf64ca99eab385115743131d260339da5"}],"providerMetadata":{"shortName":"Linux","orgId":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","dateUpdated":"2026-05-11T19:49:13.426Z"},"cpeApplicability":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"2.6.28","versionEndExcluding":"4.14.322"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"2.6.28","versionEndExcluding":"4.19.291"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"2.6.28","versionEndExcluding":"5.4.251"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"2.6.28","versionEndExcluding":"5.10.188"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"2.6.28","versionEndExcluding":"5.15.121"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"2.6.28","versionEndExcluding":"6.1.39"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"2.6.28","versionEndExcluding":"6.3.13"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"2.6.28","versionEndExcluding":"6.4.4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"2.6.28","versionEndExcluding":"6.5"}]}]}],"x_generator":{"engine":"bippy-1.2.0"}}}}}