In the Linux kernel, the following vulnerability has been resolved:
ALSA: hda: Fix Oops by 9.1 surround channel names
getlineout_pfx() may trigger an Oops by overflowing the static array with more than 8 channels. This was reported for MacBookPro 12,1 with Cirrus codec.
As a workaround, extend for the 9.1 channels and also fix the potential Oops by unifying the code paths accessing the same array with the proper size check.
[
{
"id": "CVE-2023-53400-08ef77c6",
"signature_type": "Function",
"signature_version": "v1",
"digest": {
"length": 1722.0,
"function_hash": "232015740390539400721751788197133781534"
},
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e8c7d7c43d5edd20e518fe1dfb2371d1fe6e8bb8",
"target": {
"function": "get_line_out_pfx",
"file": "sound/pci/hda/hda_generic.c"
}
},
{
"id": "CVE-2023-53400-27387b47",
"signature_type": "Function",
"signature_version": "v1",
"digest": {
"length": 1722.0,
"function_hash": "232015740390539400721751788197133781534"
},
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3b44ec8c5c44790a82f07e90db45643c762878c6",
"target": {
"function": "get_line_out_pfx",
"file": "sound/pci/hda/hda_generic.c"
}
},
{
"id": "CVE-2023-53400-33e7bd83",
"signature_type": "Function",
"signature_version": "v1",
"digest": {
"length": 1722.0,
"function_hash": "232015740390539400721751788197133781534"
},
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@546b1f5f45a355ae0d3a8041cdaca597dfcac825",
"target": {
"function": "get_line_out_pfx",
"file": "sound/pci/hda/hda_generic.c"
}
},
{
"id": "CVE-2023-53400-63214395",
"signature_type": "Line",
"signature_version": "v1",
"digest": {
"line_hashes": [
"71899296294297396258053286548915881182",
"306989109381982796928491071811427903851",
"31982899100551106671854647390655755465",
"322120101041047919263692910908430097076",
"94346280224144105771842941983228750307",
"128060738906636050528161340386505871477",
"283045287750673935739911333424912664496",
"319033686925039384105787503515163883157",
"236208156533148557275888932034091461259",
"263804979753044523475769781962275425147",
"334130263844217400561931203841925937519",
"310415648717730170039917608855261991596"
],
"threshold": 0.9
},
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e8c7d7c43d5edd20e518fe1dfb2371d1fe6e8bb8",
"target": {
"file": "sound/pci/hda/hda_generic.c"
}
},
{
"id": "CVE-2023-53400-b0f7b754",
"signature_type": "Line",
"signature_version": "v1",
"digest": {
"line_hashes": [
"71899296294297396258053286548915881182",
"306989109381982796928491071811427903851",
"31982899100551106671854647390655755465",
"322120101041047919263692910908430097076",
"94346280224144105771842941983228750307",
"128060738906636050528161340386505871477",
"283045287750673935739911333424912664496",
"319033686925039384105787503515163883157",
"236208156533148557275888932034091461259",
"263804979753044523475769781962275425147",
"334130263844217400561931203841925937519",
"310415648717730170039917608855261991596"
],
"threshold": 0.9
},
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b5694aae4c2d9a288bafce7d38f122769e0428e6",
"target": {
"file": "sound/pci/hda/hda_generic.c"
}
},
{
"id": "CVE-2023-53400-b81337fa",
"signature_type": "Line",
"signature_version": "v1",
"digest": {
"line_hashes": [
"71899296294297396258053286548915881182",
"306989109381982796928491071811427903851",
"31982899100551106671854647390655755465",
"322120101041047919263692910908430097076",
"94346280224144105771842941983228750307",
"128060738906636050528161340386505871477",
"283045287750673935739911333424912664496",
"319033686925039384105787503515163883157",
"236208156533148557275888932034091461259",
"263804979753044523475769781962275425147",
"334130263844217400561931203841925937519",
"310415648717730170039917608855261991596"
],
"threshold": 0.9
},
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@546b1f5f45a355ae0d3a8041cdaca597dfcac825",
"target": {
"file": "sound/pci/hda/hda_generic.c"
}
},
{
"id": "CVE-2023-53400-e6d8f623",
"signature_type": "Function",
"signature_version": "v1",
"digest": {
"length": 1722.0,
"function_hash": "232015740390539400721751788197133781534"
},
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b5694aae4c2d9a288bafce7d38f122769e0428e6",
"target": {
"function": "get_line_out_pfx",
"file": "sound/pci/hda/hda_generic.c"
}
},
{
"id": "CVE-2023-53400-eeacf09f",
"signature_type": "Line",
"signature_version": "v1",
"digest": {
"line_hashes": [
"71899296294297396258053286548915881182",
"306989109381982796928491071811427903851",
"31982899100551106671854647390655755465",
"322120101041047919263692910908430097076",
"94346280224144105771842941983228750307",
"128060738906636050528161340386505871477",
"283045287750673935739911333424912664496",
"319033686925039384105787503515163883157",
"236208156533148557275888932034091461259",
"263804979753044523475769781962275425147",
"334130263844217400561931203841925937519",
"310415648717730170039917608855261991596"
],
"threshold": 0.9
},
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3b44ec8c5c44790a82f07e90db45643c762878c6",
"target": {
"file": "sound/pci/hda/hda_generic.c"
}
}
]