Skip to main content
cve.nowby Sazabi
← All vulnerabilities
CVE-2022-49005

ASoC: ops: Fix bounds check for _sx controls

Published
Last modified
published
Not listed in CISA KEV
Fix
Fixed in 4.9.335, 4.14.301, 4.19.268, 5.4.226, 5.10.158, and 2 more
None on Exploit-DB, Metasploit or GitHub
  • Exploitation: none
  • Automatable: no
  • Technical impact: partial

Summary

In the Linux kernel, the following vulnerability has been resolved: ASoC: ops: Fix bounds check for _sx controls For _sx controls the semantics of the max field is not the usual one, max is the number of steps rather than the maximum value. This means that our check in snd_soc_put_volsw_sx() needs to just check against the maximum value.

Timeline

  1. CVE published
  2. CISA SSVC assessment

    Exploitation: none · Automatable: no · Technical impact: partial

  3. Record last updated

Affected versions

  • Linux Linux

    From 4.9.300 · fixed in 4.9.335; From 4.14.265 · fixed in 4.14.301; From 4.19.228 · fixed in 4.19.268; From 5.4.178 · fixed in 5.4.226; From 5.10.99 · fixed in 5.10.158; From 5.15.22 · fixed in 5.15.82; From 5.16.8 · fixed in 5.17

  • Linux Linux

    5.17

References 8

git.kernel.org