CVE-2022-49249

Summary

In the Linux kernel, the following vulnerability has been resolved:

ASoC: codecs: wc938x: fix accessing array out of bounds for enum type

Accessing enums using integer would result in array out of bounds access on platforms like aarch64 where sizeof(long) is 8 compared to enum size which is 4 bytes.

Fix this by using enumerated items instead of integers.

Affected Software

VendorProductVersion RangeStatus
LinuxLinuxe8ba1e05bdc016700c85fad559a812c2e795442f < adafea71b49ec4dbc44e0b84ec6eb602004a7a08affected
LinuxLinuxe8ba1e05bdc016700c85fad559a812c2e795442f < f03c0c94186d5876857132d97e28f20cdc100bdcaffected
LinuxLinuxe8ba1e05bdc016700c85fad559a812c2e795442f < d09aee1b1da196be11ed86dd4897f228f2487613affected
LinuxLinuxe8ba1e05bdc016700c85fad559a812c2e795442f < cc587b7c8fbbe128f6bd0dad025a0caea5e6d164affected
LinuxLinux5.14affected
LinuxLinux0 < 5.14unaffected
LinuxLinux5.15.33 <= 5.15.*unaffected
LinuxLinux5.16.19 <= 5.16.*unaffected
LinuxLinux5.17.2 <= 5.17.*unaffected
LinuxLinux5.18 <= *unaffected

Weaknesses

References