CVE-2022-49005: ASoC: ops: Fix bounds check for _sx controls
In the Linux kernel, the following vulnerability has been resolved:
ASoC: ops: Fix bounds check for sx controls
For sx controls the semantics of the max field is not the usual one, max is the number of steps rather than the maximum value. This means that our check in sndsocputvolswsx() needs to just check against the maximum value.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2022-49005?
CVE-2022-49005 is classified as a low severity vulnerability in the Linux kernel affecting _sx controls.
How do I fix CVE-2022-49005?
To address CVE-2022-49005, update your Linux kernel to a version that includes the patch for this vulnerability.
Which Linux kernel versions are affected by CVE-2022-49005?
CVE-2022-49005 affects Linux kernel versions from 4.9.300 to 6.1-rc7.
What components are impacted by CVE-2022-49005?
CVE-2022-49005 specifically impacts the ALSA System on Chip (ASoC) operations within the Linux kernel.
Is CVE-2022-49005 actively exploited in the wild?
As of now, there are no reported active exploits for CVE-2022-49005, but it is recommended to apply the patch to mitigate any potential risk.