CVE-2023-52736
Severity CVSS v4.0:
Pending analysis
Type:
CWE-476
NULL Pointer Dereference
Publication date:
21/05/2024
Last modified:
23/09/2025
Description
In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
ALSA: hda: Do not unset preset when cleaning up codec<br />
<br />
Several functions that take part in codec&#39;s initialization and removal<br />
are re-used by ASoC codec drivers implementations. Drivers mimic the<br />
behavior of hda_codec_driver_probe/remove() found in<br />
sound/pci/hda/hda_bind.c with their component->probe/remove() instead.<br />
<br />
One of the reasons for that is the expectation of<br />
snd_hda_codec_device_new() to receive a valid pointer to an instance of<br />
struct snd_card. This expectation can be met only once sound card<br />
components probing commences.<br />
<br />
As ASoC sound card may be unbound without codec device being actually<br />
removed from the system, unsetting ->preset in<br />
snd_hda_codec_cleanup_for_unbind() interferes with module unload -> load<br />
scenario causing null-ptr-deref. Preset is assigned only once, during<br />
device/driver matching whereas ASoC codec driver&#39;s module reloading may<br />
occur several times throughout the lifetime of an audio stack.
Impact
Base Score 3.x
5.50
Severity 3.x
MEDIUM
Vulnerable products and versions
| CPE | From | Up to |
|---|---|---|
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 5.10.169 (excluding) | |
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 5.11 (including) | 5.15.95 (excluding) |
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 5.16 (including) | 6.1.13 (excluding) |
| cpe:2.3:o:linux:linux_kernel:6.2:rc1:*:*:*:*:*:* | ||
| cpe:2.3:o:linux:linux_kernel:6.2:rc2:*:*:*:*:*:* | ||
| cpe:2.3:o:linux:linux_kernel:6.2:rc3:*:*:*:*:*:* | ||
| cpe:2.3:o:linux:linux_kernel:6.2:rc4:*:*:*:*:*:* | ||
| cpe:2.3:o:linux:linux_kernel:6.2:rc5:*:*:*:*:*:* | ||
| cpe:2.3:o:linux:linux_kernel:6.2:rc6:*:*:*:*:*:* |
To consult the complete list of CPE names with products and versions, see this page
References to Advisories, Solutions, and Tools
- https://git.kernel.org/stable/c/427ca2530da8dc61a42620d7113b05e187b6c2c0
- https://git.kernel.org/stable/c/7fc4e7191eae9d9325511e03deadfdb2224914f8
- https://git.kernel.org/stable/c/87978e6ad45a16835cc58234451111091be3c59a
- https://git.kernel.org/stable/c/e909f5f2aa55a8f9aa6919cce08015cb0e8d4668
- https://git.kernel.org/stable/c/427ca2530da8dc61a42620d7113b05e187b6c2c0
- https://git.kernel.org/stable/c/7fc4e7191eae9d9325511e03deadfdb2224914f8
- https://git.kernel.org/stable/c/87978e6ad45a16835cc58234451111091be3c59a
- https://git.kernel.org/stable/c/e909f5f2aa55a8f9aa6919cce08015cb0e8d4668



