In the Linux kernel, the following vulnerability has been resolved:
ALSA: hda: Fix possible null-ptr-deref when assigning a stream
While AudioDSP drivers assign streams exclusively of HOST or LINK type, nothing blocks a user to attempt to assign a COUPLED stream. As supplied substream instance may be a stub, what is the case when code-loading, such scenario ends with null-ptr-deref.
{
"cna_assigner": "Linux",
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/52xxx/CVE-2023-52806.json"
}"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2023-52806.json"
[
{
"id": "CVE-2023-52806-0119f7f0",
"signature_version": "v1",
"target": {
"file": "sound/hda/hdac_stream.c",
"function": "snd_hdac_stream_assign"
},
"digest": {
"function_hash": "301280421402023352273111924046656871104",
"length": 639.0
},
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f93dc90c2e8ed664985e366aa6459ac83cdab236",
"deprecated": false
},
{
"target": {
"file": "sound/hda/hdac_stream.c"
},
"signature_version": "v1",
"id": "CVE-2023-52806-0b937967",
"digest": {
"threshold": 0.9,
"line_hashes": [
"118989989130629333542061386832419244989",
"210808955191823033147186905882340706683",
"270556874252701766272994599076208702578",
"202251385452036750582979766257247427014",
"49043907157360731697255282765443422646"
]
},
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@631a96e9eb4228ff75fce7e72d133ca81194797e",
"deprecated": false
},
{
"id": "CVE-2023-52806-174aeaf3",
"signature_version": "v1",
"target": {
"file": "sound/hda/hdac_stream.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"118989989130629333542061386832419244989",
"210808955191823033147186905882340706683",
"336082806638118554981591576556291096258",
"261181826124219025063289547784303091543",
"43587521933412878163410988665158405726"
]
},
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7de25112de8222fd20564769e6c99dc9f9738a0b",
"deprecated": false
},
{
"id": "CVE-2023-52806-22b0704e",
"target": {
"file": "sound/hda/hdac_stream.c",
"function": "snd_hdac_stream_assign"
},
"signature_version": "v1",
"digest": {
"function_hash": "301280421402023352273111924046656871104",
"length": 639.0
},
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@43b91df291c8802268ab3cfd8fccfdf135800ed4",
"deprecated": false
},
{
"id": "CVE-2023-52806-360471f5",
"target": {
"file": "sound/hda/hdac_stream.c"
},
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"118989989130629333542061386832419244989",
"210808955191823033147186905882340706683",
"336082806638118554981591576556291096258",
"261181826124219025063289547784303091543",
"43587521933412878163410988665158405726"
]
},
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@758c7733cb821041f5fd403b7b97c0b95d319323",
"deprecated": false
},
{
"id": "CVE-2023-52806-36c8659f",
"signature_version": "v1",
"target": {
"file": "sound/hda/hdac_stream.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"118989989130629333542061386832419244989",
"210808955191823033147186905882340706683",
"270556874252701766272994599076208702578",
"202251385452036750582979766257247427014",
"49043907157360731697255282765443422646"
]
},
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f93dc90c2e8ed664985e366aa6459ac83cdab236",
"deprecated": false
},
{
"id": "CVE-2023-52806-3c11609b",
"target": {
"file": "sound/hda/hdac_stream.c"
},
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"118989989130629333542061386832419244989",
"210808955191823033147186905882340706683",
"270556874252701766272994599076208702578",
"202251385452036750582979766257247427014",
"49043907157360731697255282765443422646"
]
},
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@25354bae4fc310c3928e8a42fda2d486f67745d7",
"deprecated": false
},
{
"id": "CVE-2023-52806-499da5bf",
"signature_version": "v1",
"target": {
"file": "sound/hda/hdac_stream.c",
"function": "snd_hdac_stream_assign"
},
"digest": {
"function_hash": "301280421402023352273111924046656871104",
"length": 639.0
},
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@631a96e9eb4228ff75fce7e72d133ca81194797e",
"deprecated": false
},
{
"id": "CVE-2023-52806-511a5eff",
"target": {
"file": "sound/hda/hdac_stream.c",
"function": "snd_hdac_stream_assign"
},
"signature_version": "v1",
"digest": {
"function_hash": "301280421402023352273111924046656871104",
"length": 639.0
},
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@fe7c1a0c2b25c82807cb46fc3aadbf2664a682b0",
"deprecated": false
},
{
"target": {
"file": "sound/hda/hdac_stream.c",
"function": "snd_hdac_stream_assign"
},
"id": "CVE-2023-52806-51975fd1",
"signature_version": "v1",
"digest": {
"function_hash": "301280421402023352273111924046656871104",
"length": 639.0
},
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2527775616f3638f4fd54649eba8c7b84d5e4250",
"deprecated": false
},
{
"id": "CVE-2023-52806-6d068527",
"target": {
"file": "sound/hda/hdac_stream.c"
},
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"118989989130629333542061386832419244989",
"210808955191823033147186905882340706683",
"270556874252701766272994599076208702578",
"202251385452036750582979766257247427014",
"49043907157360731697255282765443422646"
]
},
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@fe7c1a0c2b25c82807cb46fc3aadbf2664a682b0",
"deprecated": false
},
{
"id": "CVE-2023-52806-8fda3636",
"signature_version": "v1",
"target": {
"file": "sound/hda/hdac_stream.c",
"function": "snd_hdac_stream_assign"
},
"digest": {
"function_hash": "301280421402023352273111924046656871104",
"length": 639.0
},
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@25354bae4fc310c3928e8a42fda2d486f67745d7",
"deprecated": false
},
{
"id": "CVE-2023-52806-9ed66d46",
"signature_version": "v1",
"target": {
"file": "sound/hda/hdac_stream.c",
"function": "snd_hdac_stream_assign"
},
"digest": {
"function_hash": "273033650170044089866809370782508490490",
"length": 639.0
},
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@758c7733cb821041f5fd403b7b97c0b95d319323",
"deprecated": false
},
{
"target": {
"file": "sound/hda/hdac_stream.c"
},
"id": "CVE-2023-52806-a64799fc",
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"118989989130629333542061386832419244989",
"210808955191823033147186905882340706683",
"270556874252701766272994599076208702578",
"202251385452036750582979766257247427014",
"49043907157360731697255282765443422646"
]
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2527775616f3638f4fd54649eba8c7b84d5e4250",
"deprecated": false
},
{
"id": "CVE-2023-52806-a966da5b",
"signature_version": "v1",
"target": {
"file": "sound/hda/hdac_stream.c",
"function": "snd_hdac_stream_assign"
},
"digest": {
"function_hash": "301280421402023352273111924046656871104",
"length": 639.0
},
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@4a320da7f7cbdab2098b103c47f45d5061f42edd",
"deprecated": false
},
{
"id": "CVE-2023-52806-b98d2f5a",
"signature_version": "v1",
"target": {
"file": "sound/hda/hdac_stream.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"118989989130629333542061386832419244989",
"210808955191823033147186905882340706683",
"270556874252701766272994599076208702578",
"202251385452036750582979766257247427014",
"49043907157360731697255282765443422646"
]
},
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@43b91df291c8802268ab3cfd8fccfdf135800ed4",
"deprecated": false
},
{
"target": {
"file": "sound/hda/hdac_stream.c",
"function": "snd_hdac_stream_assign"
},
"signature_version": "v1",
"id": "CVE-2023-52806-dda2a9b0",
"digest": {
"function_hash": "273033650170044089866809370782508490490",
"length": 639.0
},
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7de25112de8222fd20564769e6c99dc9f9738a0b",
"deprecated": false
},
{
"target": {
"file": "sound/hda/hdac_stream.c"
},
"id": "CVE-2023-52806-dfeb867a",
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"118989989130629333542061386832419244989",
"210808955191823033147186905882340706683",
"270556874252701766272994599076208702578",
"202251385452036750582979766257247427014",
"49043907157360731697255282765443422646"
]
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@4a320da7f7cbdab2098b103c47f45d5061f42edd",
"deprecated": false
}
]