CVE-2023-52904: ALSA: usb-audio: Fix possible NULL pointer dereference in snd_usb_pcm_has_fixed_rate()
In the Linux kernel, the following vulnerability has been resolved:
ALSA: usb-audio: Fix possible NULL pointer dereference in sndusbpcmhasfixedrate()
The subs function argument may be NULL, so do not use it before the NULL check.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.223-1Fixed in 5.10.234-1Fixed in 6.1.129-1Fixed in 6.1.135-1Fixed in 6.12.25-1Fixed in 6.12.27-1
Event History
Frequently Asked Questions
What is the severity of CVE-2023-52904?
CVE-2023-52904 is classified as a low severity vulnerability in the Linux kernel.
How do I fix CVE-2023-52904?
To fix CVE-2023-52904, update to the patched versions of the Linux kernel: 5.10.223-1, 5.10.226-1, 6.1.123-1, 6.1.119-1, 6.12.11-1 or 6.12.12-1.
What software is affected by CVE-2023-52904?
CVE-2023-52904 affects specific versions of the Linux kernel.
What is the nature of the vulnerability in CVE-2023-52904?
CVE-2023-52904 is a vulnerability that can lead to a NULL pointer dereference in the ALSA usb-audio subsystem.
Is there any public exploit available for CVE-2023-52904?
As of now, there are no known public exploits specifically targeting CVE-2023-52904.