← Back

CVE-2022-48951

nvd nist
Published: Oct 21, 2024Modified: Oct 25, 2024

JSON object

Loading...
7.8
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Exploitability: 1.8 / Impact: 5.9
Source: NVD

Description

In the Linux kernel, the following vulnerability has been resolved: ASoC: ops: Check bounds for second channel in snd_soc_put_volsw_sx() The bounds checks in snd_soc_put_volsw_sx() are only being applied to the first channel, meaning it is possible to write out of bounds values to the second channel in stereo controls. Add appropriate checks.

Affected (15)

Products: Linux: Linux Kernel
Linux
1 product
Linux Kernel
Configuration A
15 vulnerable
Vulnerable SoftwareAffected Versions
Linux
Linux Kernel
Before 4.9.337
Linux Kernel
From 4.10 to 4.14.303
Linux Kernel
From 4.15 to 4.19.270
Linux Kernel
From 4.20 to 5.4.228
Linux Kernel
From 5.11 to 5.15.84
Linux Kernel
From 5.16 to 6.0.14
Linux Kernel
From 5.5 to 5.10.160
Linux Kernel
Version 6.1 rc1
Linux Kernel
Version 6.1 rc2
Linux Kernel
Version 6.1 rc3
Linux Kernel
Version 6.1 rc4
Linux Kernel
Version 6.1 rc5
Linux Kernel
Version 6.1 rc6
Linux Kernel
Version 6.1 rc7
Linux Kernel
Version 6.1 rc8

Related CWEs

CWE-787
Out-of-bounds Write
The product writes data past the end, or before the beginning, of the intended buffer.

References (8)

Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Patch

Timeline

No history available yet.