CVE-2022-48738
published 2024-06-20CVE-2022-48738: In the Linux kernel, the following vulnerability has been resolved: ASoC: ops: Reject out of bounds values in snd_soc_put_volsw() We don't currently validate…
PriorityP427high7.1CVSS 3.1
AVLACLPRLUINSUCHINAH
EPSS
0.23%
14.5th percentile
In the Linux kernel, the following vulnerability has been resolved:
ASoC: ops: Reject out of bounds values in snd_soc_put_volsw()
We don't currently validate that the values being set are within the range
we advertised to userspace as being valid, do so and reject any values
that are out of range.
Affected
22 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 5.16.10-1 (bookworm) | linux 5.16.10-1 (bookworm) |
| linux | linux | — | — |
| linux | linux | >= f227b88f0fce5f9b82aa934f8829a741c2e06d82 < 40f598698129b5ceaf31012f9501b775c7b6e57d | 40f598698129b5ceaf31012f9501b775c7b6e57d |
| linux | linux | >= f227b88f0fce5f9b82aa934f8829a741c2e06d82 < 586ef863c94354a7e00e5ae5ef01443d1dc99bc7 | 586ef863c94354a7e00e5ae5ef01443d1dc99bc7 |
| linux | linux | >= f227b88f0fce5f9b82aa934f8829a741c2e06d82 < 65a61b1f56f5386486757930069fbdce94af08bf | 65a61b1f56f5386486757930069fbdce94af08bf |
| linux | linux | >= f227b88f0fce5f9b82aa934f8829a741c2e06d82 < 68fd718724284788fc5f379e0b7cac541429ece7 | 68fd718724284788fc5f379e0b7cac541429ece7 |
| linux | linux | >= f227b88f0fce5f9b82aa934f8829a741c2e06d82 < a9394f21fba027147bf275b083c77955864c366a | a9394f21fba027147bf275b083c77955864c366a |
| linux | linux | >= f227b88f0fce5f9b82aa934f8829a741c2e06d82 < 9e8895f1b3d4433f6d78aa6578e9db61ca6e6830 | 9e8895f1b3d4433f6d78aa6578e9db61ca6e6830 |
| linux | linux | >= f227b88f0fce5f9b82aa934f8829a741c2e06d82 < bb72d2dda85564c66d909108ea6903937a41679d | bb72d2dda85564c66d909108ea6903937a41679d |
| linux | linux | >= f227b88f0fce5f9b82aa934f8829a741c2e06d82 < 817f7c9335ec01e0f5e8caffc4f1dcd5e458a4c0 | 817f7c9335ec01e0f5e8caffc4f1dcd5e458a4c0 |
| linux | linux_kernel | < 4.9.300 | 4.9.300 |
| linux | linux_kernel | — | — |
| linux | linux_kernel | >= 0 < 5.10.103-1 | 5.10.103-1 |
| linux | linux_kernel | >= 0 < 5.16.10-1 | 5.16.10-1 |
| linux | linux_kernel | >= 0 < 5.16.10-1 | 5.16.10-1 |
| linux | linux_kernel | >= 0 < 5.16.10-1 | 5.16.10-1 |
| linux | linux_kernel | >= 4.10 < 4.14.265 | 4.14.265 |
| linux | linux_kernel | >= 4.15 < 4.19.228 | 4.19.228 |
| linux | linux_kernel | >= 4.20 < 5.4.178 | 5.4.178 |
| linux | linux_kernel | >= 5.11 < 5.15.22 | 5.15.22 |
| linux | linux_kernel | >= 5.16 < 5.16.8 | 5.16.8 |
| linux | linux_kernel | >= 5.5 < 5.10.99 | 5.10.99 |
CVSS provenance
nvdv3.17.1HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
osv7.1HIGH
vendor_debian7.1HIGH
vendor_redhat7.1HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
kernel: ASoC: ops: Reject out of bounds values in snd_soc_put_volsw()
vendor_redhat·2024-06-20·CVSS 7.1
CVE-2022-48738 [HIGH] CWE-125 kernel: ASoC: ops: Reject out of bounds values in snd_soc_put_volsw()
kernel: ASoC: ops: Reject out of bounds values in snd_soc_put_volsw()
In the Linux kernel, the following vulnerability has been resolved:
ASoC: ops: Reject out of bounds values in snd_soc_put_volsw()
We don't currently validate that the values being set are within the range
we advertised to userspace as being valid, do so and reject any values
that are out of range.
A vulnerability was found in the Linux kernel's ASoC operations within the soc-ops.c file, where the function snd_soc_put_volsw() fails to validate the range of values being set, results in out-of-bounds values to be accepted,
Mitigation: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability t
Debian
CVE-2022-48738: linux - In the Linux kernel, the following vulnerability has been resolved: ASoC: ops: ...
vendor_debian·2022·CVSS 7.1
CVE-2022-48738 [HIGH] CVE-2022-48738: linux - In the Linux kernel, the following vulnerability has been resolved: ASoC: ops: ...
In the Linux kernel, the following vulnerability has been resolved: ASoC: ops: Reject out of bounds values in snd_soc_put_volsw() We don't currently validate that the values being set are within the range we advertised to userspace as being valid, do so and reject any values that are out of range.
Scope: local
bookworm: resolved (fixed in 5.16.10-1)
bullseye: resolved (fixed in 5.10.103-1)
forky: resolved (fixed in 5.16.10-1)
sid: resolved (fixed in 5.16.10-1)
trixie: resolved (fixed in 5.16.10-1)
GHSA
GHSA-wpx5-jrwp-94gj: In the Linux kernel, the following vulnerability has been resolved:
ASoC: ops: Reject out of bounds values in snd_soc_put_volsw()
We don't currently
ghsa_unreviewed·2024-06-20
CVE-2022-48738 [HIGH] CWE-125 GHSA-wpx5-jrwp-94gj: In the Linux kernel, the following vulnerability has been resolved:
ASoC: ops: Reject out of bounds values in snd_soc_put_volsw()
We don't currently
In the Linux kernel, the following vulnerability has been resolved:
ASoC: ops: Reject out of bounds values in snd_soc_put_volsw()
We don't currently validate that the values being set are within the range
we advertised to userspace as being valid, do so and reject any values
that are out of range.
OSV
CVE-2022-48738: In the Linux kernel, the following vulnerability has been resolved: ASoC: ops: Reject out of bounds values in snd_soc_put_volsw() We don't currently v
osv·2024-06-20·CVSS 7.1
CVE-2022-48738 [HIGH] CVE-2022-48738: In the Linux kernel, the following vulnerability has been resolved: ASoC: ops: Reject out of bounds values in snd_soc_put_volsw() We don't currently v
In the Linux kernel, the following vulnerability has been resolved: ASoC: ops: Reject out of bounds values in snd_soc_put_volsw() We don't currently validate that the values being set are within the range we advertised to userspace as being valid, do so and reject any values that are out of range.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
https://git.kernel.org/stable/c/40f598698129b5ceaf31012f9501b775c7b6e57dhttps://git.kernel.org/stable/c/586ef863c94354a7e00e5ae5ef01443d1dc99bc7https://git.kernel.org/stable/c/65a61b1f56f5386486757930069fbdce94af08bfhttps://git.kernel.org/stable/c/68fd718724284788fc5f379e0b7cac541429ece7https://git.kernel.org/stable/c/817f7c9335ec01e0f5e8caffc4f1dcd5e458a4c0https://git.kernel.org/stable/c/9e8895f1b3d4433f6d78aa6578e9db61ca6e6830https://git.kernel.org/stable/c/a9394f21fba027147bf275b083c77955864c366ahttps://git.kernel.org/stable/c/bb72d2dda85564c66d909108ea6903937a41679dhttps://git.kernel.org/stable/c/40f598698129b5ceaf31012f9501b775c7b6e57dhttps://git.kernel.org/stable/c/586ef863c94354a7e00e5ae5ef01443d1dc99bc7https://git.kernel.org/stable/c/65a61b1f56f5386486757930069fbdce94af08bfhttps://git.kernel.org/stable/c/68fd718724284788fc5f379e0b7cac541429ece7https://git.kernel.org/stable/c/817f7c9335ec01e0f5e8caffc4f1dcd5e458a4c0https://git.kernel.org/stable/c/9e8895f1b3d4433f6d78aa6578e9db61ca6e6830https://git.kernel.org/stable/c/a9394f21fba027147bf275b083c77955864c366ahttps://git.kernel.org/stable/c/bb72d2dda85564c66d909108ea6903937a41679d
2024-06-20
Published