In the Linux kernel, the following vulnerability has been resolved:
ALSA: hda: Fix possible null-ptr-deref when assigning a stream
While AudioDSP drivers assign streams exclusively of HOST or LINK type, nothing blocks a user to attempt to assign a COUPLED stream. As supplied substream instance may be a stub, what is the case when code-loading, such scenario ends with null-ptr-deref.
[
{
"id": "CVE-2023-52806-3c11609b",
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"118989989130629333542061386832419244989",
"210808955191823033147186905882340706683",
"270556874252701766272994599076208702578",
"202251385452036750582979766257247427014",
"49043907157360731697255282765443422646"
]
},
"deprecated": false,
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@25354bae4fc310c3928e8a42fda2d486f67745d7",
"target": {
"file": "sound/hda/hdac_stream.c"
}
},
{
"id": "CVE-2023-52806-8fda3636",
"signature_version": "v1",
"digest": {
"length": 639.0,
"function_hash": "301280421402023352273111924046656871104"
},
"deprecated": false,
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@25354bae4fc310c3928e8a42fda2d486f67745d7",
"target": {
"file": "sound/hda/hdac_stream.c",
"function": "snd_hdac_stream_assign"
}
}
]