CVE-2023-53275
Published: Sep 16, 2025
Modified: May 23, 2026
Description
In the Linux kernel, the following vulnerability has been resolved: ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync() The variable codec->regmap is often protected by the lock codec->regmap_lock when is accessed. However, it is accessed without holding the lock when is accessed in snd_hdac_regmap_sync(): if (codec->regmap) In my opinion, this may be a harmful race, because if codec->regmap is set to NULL right after the condition is checked, a null-pointer dereference can occur in the called function regcache_sync(): map->lock(map->lock_arg); --> Line 360 in drivers/base/regmap/regcache.c To fix this possible null-pointer dereference caused by data race, the mutex_lock coverage is extended to protect the if statement as well as the function call to regcache_sync(). [ Note: the lack of the regmap_lock itself is harmless for the current codec driver implementations, as snd_hdac_regmap_sync() is only for PM runtime resume that is prohibited during the codec probe. But the change makes the whole code more consistent, so it's merged as is -- tiwai ]
| Vendor | Product | Versions |
|---|---|---|
Linux | Linux | affected 69d5dc286d05441ca2f854ae8df11201f6f9b706 - < 109f0aaa0b8838a88af9125b79579023539300a7affected 1a462be52f4505a2719631fb5aa7bfdbd37bfd8d - < 9f9eed451176ffcac6b5ba0f6dae1a6b4a1cb0ebaffected 1a462be52f4505a2719631fb5aa7bfdbd37bfd8d - < 8703b26387e1fa4f8749db98d24c67617b873acbaffected 1a462be52f4505a2719631fb5aa7bfdbd37bfd8d - < cdd412b528dee6e0851c4735d6676ec138da13a4affected 1a462be52f4505a2719631fb5aa7bfdbd37bfd8d - < b32e40379e5b2814de0c4bc199edc2d82317dc07+2 more versions |
Linux | Linux | affected 5.6unaffected 0 - < 5.6unaffected 5.4.255 - <= 5.4.*unaffected 5.10.192 - <= 5.10.*unaffected 5.15.128 - <= 5.15.*+3 more versions |
References
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now