In the Linux kernel, the following vulnerability has been resolved:
ALSA: hda/via: Avoid potential array out-of-bound in addsecretdac_path()
sndhdaget_connections() can return a negative error code. It may lead to accessing 'conn' array at a negative index.
Found by Linux Verification Center (linuxtesting.org) with SVACE.
{
"cna_assigner": "Linux",
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/52xxx/CVE-2023-52988.json"
}"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-52988.json"
[
{
"id": "CVE-2023-52988-147efd89",
"digest": {
"threshold": 0.9,
"line_hashes": [
"233770869086639152967739723337286103509",
"65069129604629021086698011221134694836",
"33568016620891757462300358018732259476",
"259357969247304002474225247004969200735"
]
},
"signature_type": "Line",
"target": {
"file": "sound/pci/hda/patch_via.c"
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2b557fa635e7487f638c0f030c305870839eeda2",
"deprecated": false
},
{
"id": "CVE-2023-52988-4ac22780",
"digest": {
"threshold": 0.9,
"line_hashes": [
"233770869086639152967739723337286103509",
"65069129604629021086698011221134694836",
"33568016620891757462300358018732259476",
"259357969247304002474225247004969200735"
]
},
"signature_type": "Line",
"target": {
"file": "sound/pci/hda/patch_via.c"
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@437e50ef6290ac835d526d0e45f466a0aa69ba1b",
"deprecated": false
},
{
"id": "CVE-2023-52988-7e253bc9",
"digest": {
"length": 635.0,
"function_hash": "250344298716182810863998549100881244673"
},
"signature_type": "Function",
"target": {
"file": "sound/pci/hda/patch_via.c",
"function": "add_secret_dac_path"
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b9cee506da2b7920b5ea02ccd8e78a907d0ee7aa",
"deprecated": false
},
{
"id": "CVE-2023-52988-851a6c4b",
"digest": {
"threshold": 0.9,
"line_hashes": [
"233770869086639152967739723337286103509",
"65069129604629021086698011221134694836",
"33568016620891757462300358018732259476",
"259357969247304002474225247004969200735"
]
},
"signature_type": "Line",
"target": {
"file": "sound/pci/hda/patch_via.c"
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f011360ad234a07cb6fbcc720fff646a93a9f0d6",
"deprecated": false
},
{
"id": "CVE-2023-52988-922558f2",
"digest": {
"length": 635.0,
"function_hash": "250344298716182810863998549100881244673"
},
"signature_type": "Function",
"target": {
"file": "sound/pci/hda/patch_via.c",
"function": "add_secret_dac_path"
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f011360ad234a07cb6fbcc720fff646a93a9f0d6",
"deprecated": false
},
{
"id": "CVE-2023-52988-b753f74f",
"digest": {
"length": 635.0,
"function_hash": "250344298716182810863998549100881244673"
},
"signature_type": "Function",
"target": {
"file": "sound/pci/hda/patch_via.c",
"function": "add_secret_dac_path"
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1b9256c96220bcdba287eeeb90e7c910c77f8c46",
"deprecated": false
},
{
"id": "CVE-2023-52988-be7b3f49",
"digest": {
"length": 635.0,
"function_hash": "250344298716182810863998549100881244673"
},
"signature_type": "Function",
"target": {
"file": "sound/pci/hda/patch_via.c",
"function": "add_secret_dac_path"
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2b557fa635e7487f638c0f030c305870839eeda2",
"deprecated": false
},
{
"id": "CVE-2023-52988-c2e083f6",
"digest": {
"length": 635.0,
"function_hash": "250344298716182810863998549100881244673"
},
"signature_type": "Function",
"target": {
"file": "sound/pci/hda/patch_via.c",
"function": "add_secret_dac_path"
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@6e1f586ddec48d71016b81acf68ba9f49ca54db8",
"deprecated": false
},
{
"id": "CVE-2023-52988-d787e824",
"digest": {
"length": 635.0,
"function_hash": "250344298716182810863998549100881244673"
},
"signature_type": "Function",
"target": {
"file": "sound/pci/hda/patch_via.c",
"function": "add_secret_dac_path"
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@437e50ef6290ac835d526d0e45f466a0aa69ba1b",
"deprecated": false
},
{
"id": "CVE-2023-52988-e1bba270",
"digest": {
"threshold": 0.9,
"line_hashes": [
"233770869086639152967739723337286103509",
"65069129604629021086698011221134694836",
"33568016620891757462300358018732259476",
"259357969247304002474225247004969200735"
]
},
"signature_type": "Line",
"target": {
"file": "sound/pci/hda/patch_via.c"
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b9cee506da2b7920b5ea02ccd8e78a907d0ee7aa",
"deprecated": false
},
{
"id": "CVE-2023-52988-e65e4aa2",
"digest": {
"threshold": 0.9,
"line_hashes": [
"233770869086639152967739723337286103509",
"65069129604629021086698011221134694836",
"33568016620891757462300358018732259476",
"259357969247304002474225247004969200735"
]
},
"signature_type": "Line",
"target": {
"file": "sound/pci/hda/patch_via.c"
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1b9256c96220bcdba287eeeb90e7c910c77f8c46",
"deprecated": false
},
{
"id": "CVE-2023-52988-e7826073",
"digest": {
"threshold": 0.9,
"line_hashes": [
"233770869086639152967739723337286103509",
"65069129604629021086698011221134694836",
"33568016620891757462300358018732259476",
"259357969247304002474225247004969200735"
]
},
"signature_type": "Line",
"target": {
"file": "sound/pci/hda/patch_via.c"
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@6e1f586ddec48d71016b81acf68ba9f49ca54db8",
"deprecated": false
}
]