CVE-2023-53666 — Missing Report of Error Condition in Linux

CWE-392 — Missing Report of Error Condition5 documents5 sources
Severity
5.5MEDIUMNVD
EPSS
0.0%
top 96.90%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
LinuxLinux KernelDebian Linux
Timeline
PublishedOct 7

Description

In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: wcd938x: fix missing mbhc init error handling MBHC initialisation can fail so add the missing error handling to avoid dereferencing an error pointer when later configuring the jack: Unable to handle kernel paging request at virtual address fffffffffffffff8 pc : wcd_mbhc_start+0x28/0x380 [snd_soc_wcd_mbhc] lr : wcd938x_codec_set_jack+0x28/0x48 [snd_soc_wcd938x] Call trace: wcd_mbhc_start+0x28/0x380 [snd_soc_wcd…

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HExploitability: 1.8 | Impact: 3.6

Affected Packages4 packages

▶NVDlinux/linux_kernel5.15 — 5.15.123+3
▶Debianlinux/linux_kernel< 6.1.52-1+2
▶CVEListV5linux/linuxbcee7ed09b8e70b65d5c04f5d1acd2cf4213c2f3 — 5a34d252052b5da743ef82591c860fc947384d4e+4
▶debiandebian/linux< linux 6.1.52-1 (bookworm)

Patches

Patch: git.kernel.org ↗Patch: git.kernel.org ↗Patch: git.kernel.org ↗

🔴Vulnerability Details

2
GHSA
GHSA-75gq-3wgg-m886: In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: wcd938x: fix missing mbhc init error handling MBHC initialisation↗2025-10-07
▶
OSV
CVE-2023-53666: In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: wcd938x: fix missing mbhc init error handling MBHC initialisation ca↗2025-10-07
▶

📋Vendor Advisories

2
Red Hat
kernel: Linux kernel: Denial of Service in ASoC wcd938x codec due to improper error handling↗2025-10-07
▶
Debian
CVE-2023-53666: linux - In the Linux kernel, the following vulnerability has been resolved: ASoC: codec...↗2023
▶