The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - ALSA: hda: Do not unset preset when cleaning up codec Several functions that take part in codec's     initialization and removal are re-used by ASoC codec drivers implementations. Drivers mimic the behavior     of hda_codec_driver_probe/remove() found in sound/pci/hda/hda_bind.c with their component->probe/remove()     instead. One of the reasons for that is the expectation of snd_hda_codec_device_new() to receive a valid     pointer to an instance of struct snd_card. This expectation can be met only once sound card components     probing commences. As ASoC sound card may be unbound without codec device being actually removed from the     system, unsetting ->preset in snd_hda_codec_cleanup_for_unbind() interferes with module unload -> load     scenario causing null-ptr-deref. Preset is assigned only once, during device/driver matching whereas ASoC     codec driver's module reloading may occur several times throughout the lifetime of an audio stack.
    (CVE-2023-52736)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2023-52736

high Nessus Plugin ID 226572

Version 1.5

Version 1.4

Version 1.3

Version 1.2

Version 1.1

Version 1.5 Sep 6, 2025, 10:42 AM CVSS metrics ("Cvssv4 score" set to 0.0) CVSSv2 severity (based on None, severity decreased from "High" to "Low") Detection (updated detection logic) Plugin metadata Plugin Feed: 202509061042
Version 1.4 Sep 4, 2025, 5:30 PM CVSS metrics ("Cvssv4 score" set to 0.0) CVSSv2 severity (based on None, severity decreased from "High" to "Low") Detection (updated detection logic) Plugin Feed: 202509041730
Version 1.3 Aug 31, 2025, 7:32 PM CVSS metrics ("Cvssv4 score" set to 0.0) CVSSv2 severity (based on None, severity decreased from "High" to "Low") Detection (updated detection logic) Plugin metadata Plugin Feed: 202508311932
Version 1.2 Aug 15, 2025, 7:38 PM CVSS metrics ("CVSSv2 score" set to 7.2) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:N/C:C/I:C/A:C") CVSS metrics ("CVSSv3 score" set to 7.1) CVSS metrics ("CVSSv3 vector" set to "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H") CVSS metrics ("Cvssv4 score" set to 0.0) CVSSv2 severity (based on CVE-2023-52736, severity increased from "Medium" to "High") CVSSv2 severity (based on None, severity decreased from "High" to "Low") CVSSv3 severity (based on None, severity increased from "Medium" to "High") Detection (updated detection logic) Plugin metadata Plugin Feed: 202508151938
Version 1.1 Mar 6, 2025, 7:23 AM New Plugin Feed: 202503060723