CVE-2022-50052
N/A
N/A
Summary
In the Linux kernel, the following vulnerability has been resolved:
ASoC: Intel: avs: Fix potential buffer overflow by snprintf()
snprintf() returns the would-be-filled size when the string overflows the given buffer size, hence using this value may result in a buffer overflow (although it's unrealistic).
This patch replaces it with a safer version, scnprintf() for papering over such a potential issue.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Linux | Linux | f1b3b320bd6519b16e3480f74f2926d106e3bcba < 840311a09f75632b9d41fbc1cd5c7aea94ce5f7e | affected |
| Linux | Linux | f1b3b320bd6519b16e3480f74f2926d106e3bcba < ca3b7b9dc9bc1fa552f4697b7cccfa0258a44d00 | affected |
| Linux | Linux | 5.19 | affected |
| Linux | Linux | 0 < 5.19 | unaffected |
| Linux | Linux | 5.19.4 <= 5.19.* | unaffected |
| Linux | Linux | 6.0 <= * | unaffected |
Weaknesses
References
- https://git.kernel.org/stable/c/840311a09f75632b9d41fbc1cd5c7aea94ce5f7e
- https://git.kernel.org/stable/c/ca3b7b9dc9bc1fa552f4697b7cccfa0258a44d00
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.