CVE-2022-48739

Summary

In the Linux kernel, the following vulnerability has been resolved:

ASoC: hdmi-codec: Fix OOB memory accesses

Correct size of iec_status array by changing it to the size of status array of the struct snd_aes_iec958. This fixes out-of-bounds slab read accesses made by memcpy() of the hdmi-codec driver. This problem is reported by KASAN.

Affected Software

VendorProductVersion RangeStatus
LinuxLinux7a8e1d44211e16eb394b7b9e0b236ee1503a3ad3 < 10007bd96b6c4c3cfaea9e76c311b06a07a5e260affected
LinuxLinux7a8e1d44211e16eb394b7b9e0b236ee1503a3ad3 < 1552e66be325a21d7eff49f46013fb402165a0acaffected
LinuxLinux7a8e1d44211e16eb394b7b9e0b236ee1503a3ad3 < 06feec6005c9d9500cd286ec440aabf8b2ddd94daffected
LinuxLinux5.14affected
LinuxLinux0 < 5.14unaffected
LinuxLinux5.15.22 <= 5.15.*unaffected
LinuxLinux5.16.8 <= 5.16.*unaffected
LinuxLinux5.17 <= *unaffected

Weaknesses

ADP Enrichment

CVE Program Container

Additional References

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References