In the Linux kernel, the following vulnerability has been resolved:
ALSA: hda: Fix possible null-ptr-deref when assigning a stream
While AudioDSP drivers assign streams exclusively of HOST or LINK type, nothing blocks a user to attempt to assign a COUPLED stream. As supplied substream instance may be a stub, what is the case when code-loading, such scenario ends with null-ptr-deref.
{
"cna_assigner": "Linux",
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/52xxx/CVE-2023-52806.json"
}"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-52806.json"
[
{
"signature_type": "Line",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@25354bae4fc310c3928e8a42fda2d486f67745d7",
"digest": {
"line_hashes": [
"118989989130629333542061386832419244989",
"210808955191823033147186905882340706683",
"270556874252701766272994599076208702578",
"202251385452036750582979766257247427014",
"49043907157360731697255282765443422646"
],
"threshold": 0.9
},
"id": "CVE-2023-52806-3c11609b",
"deprecated": false,
"target": {
"file": "sound/hda/hdac_stream.c"
}
},
{
"signature_type": "Function",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@fe7c1a0c2b25c82807cb46fc3aadbf2664a682b0",
"digest": {
"function_hash": "301280421402023352273111924046656871104",
"length": 639.0
},
"id": "CVE-2023-52806-511a5eff",
"deprecated": false,
"target": {
"file": "sound/hda/hdac_stream.c",
"function": "snd_hdac_stream_assign"
}
},
{
"signature_type": "Line",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@fe7c1a0c2b25c82807cb46fc3aadbf2664a682b0",
"digest": {
"line_hashes": [
"118989989130629333542061386832419244989",
"210808955191823033147186905882340706683",
"270556874252701766272994599076208702578",
"202251385452036750582979766257247427014",
"49043907157360731697255282765443422646"
],
"threshold": 0.9
},
"id": "CVE-2023-52806-6d068527",
"deprecated": false,
"target": {
"file": "sound/hda/hdac_stream.c"
}
},
{
"signature_type": "Function",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@25354bae4fc310c3928e8a42fda2d486f67745d7",
"digest": {
"function_hash": "301280421402023352273111924046656871104",
"length": 639.0
},
"id": "CVE-2023-52806-8fda3636",
"deprecated": false,
"target": {
"file": "sound/hda/hdac_stream.c",
"function": "snd_hdac_stream_assign"
}
}
]