CVE-2022-48738

HIGH

Linux Kernel - Out-of-bounds Read in snd_soc_put_volsw()

Title source: llm
STIX 2.1

Description

In the Linux kernel, the following vulnerability has been resolved: ASoC: ops: Reject out of bounds values in snd_soc_put_volsw() We don't currently validate that the values being set are within the range we advertised to userspace as being valid, do so and reject any values that are out of range.

References (8)

Core 8

Scores

CVSS v3 7.1
EPSS 0.0023
EPSS Percentile 14.2%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-125
Status published
Products (27)
linux/Kernel 3.15.0 - 4.9.300linux
linux/Kernel 4.10.0 - 4.14.265linux
linux/Kernel 4.15.0 - 4.19.228linux
linux/Kernel 4.20.0 - 5.4.178linux
linux/Kernel 5.11.0 - 5.15.22linux
linux/Kernel 5.16.0 - 5.16.8linux
linux/Kernel 5.5.0 - 5.10.99linux
Linux/Linux < 3.15
Linux/Linux 3.15
Linux/Linux 4.14.265 - 4.14.*
... and 17 more
Published Jun 20, 2024
Tracked Since Feb 18, 2026