In the Linux kernel, the following vulnerability has been resolved:

ALSA: ac97: Fix possible NULL dereference in snd_ac97_mixer

smatch error:
sound/pci/ac97/ac97_codec.c:2354 snd_ac97_mixer() error:
we previously assumed 'rac97' could be null (see line 2072)

remove redundant assignment, return error if rac97 is NULL.

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00213.

Exploitation none

Automatable no

Technical Impact partial

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions
Linux Linux unaffected
Version Status Constraints
da3cec35dd3c31d8706db4bf379372ce70d92118 affected < 809af7bb4219bdeef0dbb8b2ed700d6516d13fe9
da3cec35dd3c31d8706db4bf379372ce70d92118 affected < e4cccff1e7ab6ea30995b6fbbb007d02647e025c
da3cec35dd3c31d8706db4bf379372ce70d92118 affected < 5f13d67027fa782096e6aee0db5dce61c4aeb613
da3cec35dd3c31d8706db4bf379372ce70d92118 affected < f923a582217b198b557756809ffe42ac0fad6adb
da3cec35dd3c31d8706db4bf379372ce70d92118 affected < 300e26e3e64880de5013eac8831cf44387ef752c
da3cec35dd3c31d8706db4bf379372ce70d92118 affected < d28b83252e150155b8b8c65b612c555e93c8b45f
da3cec35dd3c31d8706db4bf379372ce70d92118 affected < 09baf460dfba79ee6a0c72e68ccdbbba84d894df
da3cec35dd3c31d8706db4bf379372ce70d92118 affected < 228da1fa124470606ac19783e551f9d51a1e01b0
da3cec35dd3c31d8706db4bf379372ce70d92118 affected < 79597c8bf64ca99eab385115743131d260339da5
Linux Linux affected
Version Status Constraints
2.6.28 affected —
0 unaffected < 2.6.28
4.14.322 unaffected ≤ 4.14.*
4.19.291 unaffected ≤ 4.19.*
5.4.251 unaffected ≤ 5.4.*
5.10.188 unaffected ≤ 5.10.*
5.15.121 unaffected ≤ 5.15.*
6.1.39 unaffected ≤ 6.1.*
6.3.13 unaffected ≤ 6.3.*
6.4.4 unaffected ≤ 6.4.*
6.5 unaffected ≤ *

Configuration 1 [-]

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

No data.

OpenCVE Enrichment is a feature of OpenCVE that uses AI to automatically link vendors and products to CVEs. Learn more on GitHub.

Vendors Products
Linux Subscribe
Linux Kernel Subscribe

Project Subscriptions

Vendors Products
Linux Subscribe
Linux Kernel Subscribe
Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
https://git.kernel.org/stable/c/09baf460dfba79ee6a0c72e68ccdbbba84d894df cve-icon cve-icon
https://git.kernel.org/stable/c/228da1fa124470606ac19783e551f9d51a1e01b0 cve-icon cve-icon
https://git.kernel.org/stable/c/300e26e3e64880de5013eac8831cf44387ef752c cve-icon cve-icon
https://git.kernel.org/stable/c/5f13d67027fa782096e6aee0db5dce61c4aeb613 cve-icon cve-icon
https://git.kernel.org/stable/c/79597c8bf64ca99eab385115743131d260339da5 cve-icon cve-icon
https://git.kernel.org/stable/c/809af7bb4219bdeef0dbb8b2ed700d6516d13fe9 cve-icon cve-icon
https://git.kernel.org/stable/c/d28b83252e150155b8b8c65b612c555e93c8b45f cve-icon cve-icon
https://git.kernel.org/stable/c/e4cccff1e7ab6ea30995b6fbbb007d02647e025c cve-icon cve-icon
https://git.kernel.org/stable/c/f923a582217b198b557756809ffe42ac0fad6adb cve-icon cve-icon
https://lore.kernel.org/linux-cve-announce/2025100718-CVE-2023-53648-3c04@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2023-53648 cve-icon
https://www.cve.org/CVERecord?id=CVE-2023-53648 cve-icon
History

Fri, 06 Nov 2026 19:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Tue, 03 Feb 2026 22:30:00 +0000

Type Values Removed Values Added
Weaknesses CWE-476
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Metrics cvssV3_1

{'score': 7.0, 'vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H'}

 cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}

Wed, 08 Oct 2025 13:45:00 +0000

Type Values Removed Values Added
First Time appeared Linux
Linux linux Kernel
Vendors & Products Linux
Linux linux Kernel

Wed, 08 Oct 2025 00:15:00 +0000

Type Values Removed Values Added
References
Metrics threat_severity

None

 cvssV3_1

{'score': 7.0, 'vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H'}

threat_severity

Low

Tue, 07 Oct 2025 15:30:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: ALSA: ac97: Fix possible NULL dereference in snd_ac97_mixer smatch error: sound/pci/ac97/ac97_codec.c:2354 snd_ac97_mixer() error: we previously assumed 'rac97' could be null (see line 2072) remove redundant assignment, return error if rac97 is NULL.
Title ALSA: ac97: Fix possible NULL dereference in snd_ac97_mixer
References

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2026-11-05T20:31:19.302Z

Reserved: 2025-10-07T15:16:59.659Z

Link: CVE-2023-53648

cve-icon Vulnrichment

Updated: 2026-11-05T20:26:25.404Z

cve-icon NVD

Status : Analyzed

Published: 2025-10-07T16:15:48.257

Modified: 2026-11-05T21:17:30.490

Link: CVE-2023-53648

cve-icon Redhat

Severity : Low

Publid Date: 2025-10-07T00:00:00Z

Links: CVE-2023-53648 - Bugzilla

cve-icon OpenCVE Enrichment

Updated: 2025-10-08T13:36:41Z

Weaknesses