CVE-2022-48738

Summary

In the Linux kernel, the following vulnerability has been resolved:

ASoC: ops: Reject out of bounds values in snd_soc_put_volsw()

We don't currently validate that the values being set are within the range we advertised to userspace as being valid, do so and reject any values that are out of range.

Affected Software

VendorProductVersion RangeStatus
LinuxLinuxf227b88f0fce5f9b82aa934f8829a741c2e06d82 < 40f598698129b5ceaf31012f9501b775c7b6e57daffected
LinuxLinuxf227b88f0fce5f9b82aa934f8829a741c2e06d82 < 586ef863c94354a7e00e5ae5ef01443d1dc99bc7affected
LinuxLinuxf227b88f0fce5f9b82aa934f8829a741c2e06d82 < 65a61b1f56f5386486757930069fbdce94af08bfaffected
LinuxLinuxf227b88f0fce5f9b82aa934f8829a741c2e06d82 < 68fd718724284788fc5f379e0b7cac541429ece7affected
LinuxLinuxf227b88f0fce5f9b82aa934f8829a741c2e06d82 < a9394f21fba027147bf275b083c77955864c366aaffected
LinuxLinuxf227b88f0fce5f9b82aa934f8829a741c2e06d82 < 9e8895f1b3d4433f6d78aa6578e9db61ca6e6830affected
LinuxLinuxf227b88f0fce5f9b82aa934f8829a741c2e06d82 < bb72d2dda85564c66d909108ea6903937a41679daffected
LinuxLinuxf227b88f0fce5f9b82aa934f8829a741c2e06d82 < 817f7c9335ec01e0f5e8caffc4f1dcd5e458a4c0affected
LinuxLinux3.15affected
LinuxLinux0 < 3.15unaffected
LinuxLinux4.9.300 <= 4.9.*unaffected
LinuxLinux4.14.265 <= 4.14.*unaffected
LinuxLinux4.19.228 <= 4.19.*unaffected
LinuxLinux5.4.178 <= 5.4.*unaffected
LinuxLinux5.10.99 <= 5.10.*unaffected
LinuxLinux5.15.22 <= 5.15.*unaffected
LinuxLinux5.16.8 <= 5.16.*unaffected
LinuxLinux5.17 <= *unaffected

Weaknesses

ADP Enrichment

CVE Program Container

Additional References

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References