← CVE Intelligence

CVE-2023-52988

ALSA: hda/via: Avoid potential array out-of-bound in add_secret_dac_path() PUBLISHED

Description (CNA)

In the Linux kernel, the following vulnerability has been resolved: ALSA: hda/via: Avoid potential array out-of-bound in add_secret_dac_path() snd_hda_get_connections() can return a negative error code. It may lead to accessing 'conn' array at a negative index. Found by Linux Verification Center (linuxtesting.org) with SVACE.

Affected (CNA)

Vendor / productVersions
Linux / Linuxaffected 30b4503378c976cf66201a1e81820519f6bd79ac before 437e50ef6290ac835d526d0e45f466a0aa69ba1b; affected 30b4503378c976cf66201a1e81820519f6bd79ac before 6e1f586ddec48d71016b81acf68ba9f49ca54db8; affected 30b4503378c976cf66201a1e81820519f6bd79ac before d6870f3800dbb212ae8433183ee82f566d067c6c; affected 30b4503378c976cf66201a1e81820519f6bd79ac before 2b557fa635e7487f638c0f030c305870839eeda2; affected 30b4503378c976cf66201a1e81820519f6bd79ac before 1b9256c96220bcdba287eeeb90e7c910c77f8c46; affected 30b4503378c976cf66201a1e81820519f6bd79ac before f011360ad234a07cb6fbcc720fff646a93a9f0d6; affected 30b4503378c976cf66201a1e81820519f6bd79ac before b9cee506da2b7920b5ea02ccd8e78a907d0ee7aa
Linux / Linuxaffected 3.1; unaffected 0 before 3.1; unaffected 4.14.306 through 4.14.*; unaffected 4.19.273 through 4.19.*; unaffected 5.4.232 through 5.4.*; unaffected 5.10.168 through 5.10.*; unaffected 5.15.93 through 5.15.*; unaffected 6.1.11 through 6.1.*; unaffected 6.2 through *

CWE

No CWE identifiers supplied.

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.