CVE-2022-48951: ASoC: ops: Check bounds for second channel in snd_soc_put_volsw_sx()
In the Linux kernel, the following vulnerability has been resolved:
ASoC: ops: Check bounds for second channel in sndsocputvolswsx()
The bounds checks in sndsocputvolswsx() are only being applied to the first channel, meaning it is possible to write out of bounds values to the second channel in stereo controls. Add appropriate checks.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2022-48951?
CVE-2022-48951 is a notable vulnerability in the Linux kernel affecting the bounds check in snd_soc_put_volsw_sx().
How do I fix CVE-2022-48951?
To fix CVE-2022-48951, update to a patched version of the Linux kernel that addresses this bounds checking vulnerability.
Which versions are affected by CVE-2022-48951?
CVE-2022-48951 impacts various versions of the Linux kernel, particularly those prior to the fixes included in later releases.
What components are involved in CVE-2022-48951?
CVE-2022-48951 involves the ASoC (Advanced Sound Command Interface) subsystem in the Linux kernel.
Is CVE-2022-48951 likely to be exploited?
CVE-2022-48951 could potentially be exploited if out-of-bounds values are written, leading to undefined behavior.