CVE-2023-52736

Severity CVSS v4.0:
Pending analysis
Type:
CWE-476 NULL Pointer Dereference
Publication date:
21/05/2024
Last modified:
23/09/2025

Description

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> ALSA: hda: Do not unset preset when cleaning up codec<br /> <br /> Several functions that take part in codec&amp;#39;s initialization and removal<br /> are re-used by ASoC codec drivers implementations. Drivers mimic the<br /> behavior of hda_codec_driver_probe/remove() found in<br /> sound/pci/hda/hda_bind.c with their component-&gt;probe/remove() instead.<br /> <br /> One of the reasons for that is the expectation of<br /> snd_hda_codec_device_new() to receive a valid pointer to an instance of<br /> struct snd_card. This expectation can be met only once sound card<br /> components probing commences.<br /> <br /> As ASoC sound card may be unbound without codec device being actually<br /> removed from the system, unsetting -&gt;preset in<br /> snd_hda_codec_cleanup_for_unbind() interferes with module unload -&gt; load<br /> scenario causing null-ptr-deref. Preset is assigned only once, during<br /> device/driver matching whereas ASoC codec driver&amp;#39;s module reloading may<br /> occur several times throughout the lifetime of an audio stack.

Vulnerable products and versions

CPE From Up to
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 5.10.169 (excluding)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 5.11 (including) 5.15.95 (excluding)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 5.16 (including) 6.1.13 (excluding)
cpe:2.3:o:linux:linux_kernel:6.2:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.2:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.2:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.2:rc4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.2:rc5:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.2:rc6:*:*:*:*:*:*