CVE-2022-48717: ASoC: max9759: fix underflow in speaker_gain_control_put()
In the Linux kernel, the following vulnerability has been resolved:
ASoC: max9759: fix underflow in speakergaincontrolput()
Check for negative values of "priv->gain" to prevent an out of bounds access. The concern is that these might come from the user via: -> sndctlelemwriteuser() -> sndctlelemwrite() -> kctl->put()
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2022-48717?
CVE-2022-48717 has been classified as a medium severity vulnerability.
How do I fix CVE-2022-48717?
To fix CVE-2022-48717, update to the latest version of the Linux kernel that includes the patch for this vulnerability.
What causes CVE-2022-48717?
CVE-2022-48717 is caused by an underflow in the speaker_gain_control_put function within the Linux kernel's ASoC subsystem.
What systems are affected by CVE-2022-48717?
CVE-2022-48717 affects systems running specific versions of the Linux kernel that include the ASoC component.
Is CVE-2022-48717 an exploit risk?
Yes, CVE-2022-48717 poses an exploit risk as it allows out-of-bounds access potentially leading to denial of service or other malicious activity.