Skip to main content
cve.nowby Sazabi
← All vulnerabilities
CVE-2022-48951

ASoC: ops: Check bounds for second channel in snd_soc_put_volsw_sx()

Published
Last modified
published
Not listed in CISA KEV
Fix
Fixed in 4.9.337, 4.14.303, 4.19.270, 5.4.228, 5.10.160, and 2 more
None on Exploit-DB, Metasploit or GitHub
  • Exploitation: none
  • Automatable: no
  • Technical impact: partial

Summary

In the Linux kernel, the following vulnerability has been resolved: ASoC: ops: Check bounds for second channel in snd_soc_put_volsw_sx() The bounds checks in snd_soc_put_volsw_sx() are only being applied to the first channel, meaning it is possible to write out of bounds values to the second channel in stereo controls. Add appropriate checks.

Timeline

  1. CVE published
  2. CISA SSVC assessment

    Exploitation: none · Automatable: no · Technical impact: partial

  3. Record last updated

Affected versions

  • Linux Linux

    From 4.9.300 · fixed in 4.9.337; From 4.14.265 · fixed in 4.14.303; From 4.19.228 · fixed in 4.19.270; From 5.4.178 · fixed in 5.4.228; From 5.10.99 · fixed in 5.10.160; From 5.15.22 · fixed in 5.15.84; From 5.16.8 · fixed in 5.17

  • Linux Linux

    5.17

References 8

git.kernel.org