CVE - CVE-2023-52988

CVE-ID
CVE-2023-52988	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
In the Linux kernel, the following vulnerability has been resolved: ALSA: hda/via: Avoid potential array out-of-bound in add_secret_dac_path() snd_hda_get_connections() can return a negative error code. It may lead to accessing 'conn' array at a negative index. Found by Linux Verification Center (linuxtesting.org) with SVACE.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:https://git.kernel.org/stable/c/1b9256c96220bcdba287eeeb90e7c910c77f8c46 URL:https://git.kernel.org/stable/c/1b9256c96220bcdba287eeeb90e7c910c77f8c46 MISC:https://git.kernel.org/stable/c/2b557fa635e7487f638c0f030c305870839eeda2 URL:https://git.kernel.org/stable/c/2b557fa635e7487f638c0f030c305870839eeda2 MISC:https://git.kernel.org/stable/c/437e50ef6290ac835d526d0e45f466a0aa69ba1b URL:https://git.kernel.org/stable/c/437e50ef6290ac835d526d0e45f466a0aa69ba1b MISC:https://git.kernel.org/stable/c/6e1f586ddec48d71016b81acf68ba9f49ca54db8 URL:https://git.kernel.org/stable/c/6e1f586ddec48d71016b81acf68ba9f49ca54db8 MISC:https://git.kernel.org/stable/c/b9cee506da2b7920b5ea02ccd8e78a907d0ee7aa URL:https://git.kernel.org/stable/c/b9cee506da2b7920b5ea02ccd8e78a907d0ee7aa MISC:https://git.kernel.org/stable/c/d6870f3800dbb212ae8433183ee82f566d067c6c URL:https://git.kernel.org/stable/c/d6870f3800dbb212ae8433183ee82f566d067c6c MISC:https://git.kernel.org/stable/c/f011360ad234a07cb6fbcc720fff646a93a9f0d6 URL:https://git.kernel.org/stable/c/f011360ad234a07cb6fbcc720fff646a93a9f0d6
Assigning CNA
kernel.org
Date Record Created
20250327	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20250327)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)