CVE-2023-53400

ALSA: hda: Fix Oops by 9.1 surround channel names

Medium · published September 18, 2025

CVSS v3.1
5.5
EPSS
0%
Percentile
3.7
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

ALSA: hda: Fix Oops by 9.1 surround channel names

get_line_out_pfx() may trigger an Oops by overflowing the static array

with more than 8 channels. This was reported for MacBookPro 12,1 with

Cirrus codec.

As a workaround, extend for the 9.1 channels and also fix the

potential Oops by unifying the code paths accessing the same array

with the proper size check.

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00149 · 3.7th percentile
Published
2025-09-18T13:33Z
EPSS history
Timeline
  • 18 SEP 13:33Z
    ALSA: hda: Fix Oops by 9.1 surround channel names
    cvelistv5