In the Linux kernel, the following vulnerability has been resolved:
ALSA: hda/via: Avoid potential array out-of-bound in addsecretdac_path()
sndhdaget_connections() can return a negative error code. It may lead to accessing 'conn' array at a negative index.
Found by Linux Verification Center (linuxtesting.org) with SVACE.
[
{
"id": "CVE-2023-52988-147efd89",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2b557fa635e7487f638c0f030c305870839eeda2",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"233770869086639152967739723337286103509",
"65069129604629021086698011221134694836",
"33568016620891757462300358018732259476",
"259357969247304002474225247004969200735"
]
},
"target": {
"file": "sound/pci/hda/patch_via.c"
}
},
{
"id": "CVE-2023-52988-25986a2e",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d6870f3800dbb212ae8433183ee82f566d067c6c",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Function",
"digest": {
"length": 635.0,
"function_hash": "250344298716182810863998549100881244673"
},
"target": {
"function": "add_secret_dac_path",
"file": "sound/pci/hda/patch_via.c"
}
},
{
"id": "CVE-2023-52988-4ac22780",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@437e50ef6290ac835d526d0e45f466a0aa69ba1b",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"233770869086639152967739723337286103509",
"65069129604629021086698011221134694836",
"33568016620891757462300358018732259476",
"259357969247304002474225247004969200735"
]
},
"target": {
"file": "sound/pci/hda/patch_via.c"
}
},
{
"id": "CVE-2023-52988-7e253bc9",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b9cee506da2b7920b5ea02ccd8e78a907d0ee7aa",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Function",
"digest": {
"length": 635.0,
"function_hash": "250344298716182810863998549100881244673"
},
"target": {
"function": "add_secret_dac_path",
"file": "sound/pci/hda/patch_via.c"
}
},
{
"id": "CVE-2023-52988-851a6c4b",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f011360ad234a07cb6fbcc720fff646a93a9f0d6",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"233770869086639152967739723337286103509",
"65069129604629021086698011221134694836",
"33568016620891757462300358018732259476",
"259357969247304002474225247004969200735"
]
},
"target": {
"file": "sound/pci/hda/patch_via.c"
}
},
{
"id": "CVE-2023-52988-922558f2",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f011360ad234a07cb6fbcc720fff646a93a9f0d6",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Function",
"digest": {
"length": 635.0,
"function_hash": "250344298716182810863998549100881244673"
},
"target": {
"function": "add_secret_dac_path",
"file": "sound/pci/hda/patch_via.c"
}
},
{
"id": "CVE-2023-52988-b753f74f",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1b9256c96220bcdba287eeeb90e7c910c77f8c46",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Function",
"digest": {
"length": 635.0,
"function_hash": "250344298716182810863998549100881244673"
},
"target": {
"function": "add_secret_dac_path",
"file": "sound/pci/hda/patch_via.c"
}
},
{
"id": "CVE-2023-52988-be7b3f49",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2b557fa635e7487f638c0f030c305870839eeda2",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Function",
"digest": {
"length": 635.0,
"function_hash": "250344298716182810863998549100881244673"
},
"target": {
"function": "add_secret_dac_path",
"file": "sound/pci/hda/patch_via.c"
}
},
{
"id": "CVE-2023-52988-c2e083f6",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@6e1f586ddec48d71016b81acf68ba9f49ca54db8",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Function",
"digest": {
"length": 635.0,
"function_hash": "250344298716182810863998549100881244673"
},
"target": {
"function": "add_secret_dac_path",
"file": "sound/pci/hda/patch_via.c"
}
},
{
"id": "CVE-2023-52988-cd95096f",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d6870f3800dbb212ae8433183ee82f566d067c6c",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"233770869086639152967739723337286103509",
"65069129604629021086698011221134694836",
"33568016620891757462300358018732259476",
"259357969247304002474225247004969200735"
]
},
"target": {
"file": "sound/pci/hda/patch_via.c"
}
},
{
"id": "CVE-2023-52988-d787e824",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@437e50ef6290ac835d526d0e45f466a0aa69ba1b",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Function",
"digest": {
"length": 635.0,
"function_hash": "250344298716182810863998549100881244673"
},
"target": {
"function": "add_secret_dac_path",
"file": "sound/pci/hda/patch_via.c"
}
},
{
"id": "CVE-2023-52988-e1bba270",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b9cee506da2b7920b5ea02ccd8e78a907d0ee7aa",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"233770869086639152967739723337286103509",
"65069129604629021086698011221134694836",
"33568016620891757462300358018732259476",
"259357969247304002474225247004969200735"
]
},
"target": {
"file": "sound/pci/hda/patch_via.c"
}
},
{
"id": "CVE-2023-52988-e65e4aa2",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1b9256c96220bcdba287eeeb90e7c910c77f8c46",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"233770869086639152967739723337286103509",
"65069129604629021086698011221134694836",
"33568016620891757462300358018732259476",
"259357969247304002474225247004969200735"
]
},
"target": {
"file": "sound/pci/hda/patch_via.c"
}
},
{
"id": "CVE-2023-52988-e7826073",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@6e1f586ddec48d71016b81acf68ba9f49ca54db8",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"233770869086639152967739723337286103509",
"65069129604629021086698011221134694836",
"33568016620891757462300358018732259476",
"259357969247304002474225247004969200735"
]
},
"target": {
"file": "sound/pci/hda/patch_via.c"
}
}
]