CVE-2022-48739

Published: Jun 20, 2024Modified: Jun 17, 2026

7.1

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

Exploitability: 1.8 / Impact: 5.2

Source: NVD

Description

In the Linux kernel, the following vulnerability has been resolved: ASoC: hdmi-codec: Fix OOB memory accesses Correct size of iec_status array by changing it to the size of status array of the struct snd_aes_iec958. This fixes out-of-bounds slab read accesses made by memcpy() of the hdmi-codec driver. This problem is reported by KASAN.

Affected (4)

Products: Linux: Linux Kernel

1 product

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Linux Linux Kernel	Before 5.15.22
Linux Linux Kernel	From 5.16 to 5.16.8
Linux Linux Kernel	Version 5.17 rc1
Linux Linux Kernel	Version 5.17 rc2

Related CWEs

Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.

References (6)

https://git.kernel.org/stable/c/06feec6005c9d9500cd286ec440aabf8b2ddd94d

Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67

Patch

https://git.kernel.org/stable/c/10007bd96b6c4c3cfaea9e76c311b06a07a5e260

Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67

Patch

https://git.kernel.org/stable/c/1552e66be325a21d7eff49f46013fb402165a0ac

Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67

Patch

https://git.kernel.org/stable/c/06feec6005c9d9500cd286ec440aabf8b2ddd94d

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

https://git.kernel.org/stable/c/10007bd96b6c4c3cfaea9e76c311b06a07a5e260

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

https://git.kernel.org/stable/c/1552e66be325a21d7eff49f46013fb402165a0ac

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

Timeline

No history available yet.