CVE-2022-48739

HIGH

Linux Kernel < 5.15.22, 5.16.0-5.16.7 - Out-of-bounds Read in HDMI Codec IEC Status Array

Title source: llm

Description

In the Linux kernel, the following vulnerability has been resolved: ASoC: hdmi-codec: Fix OOB memory accesses Correct size of iec_status array by changing it to the size of status array of the struct snd_aes_iec958. This fixes out-of-bounds slab read accesses made by memcpy() of the hdmi-codec driver. This problem is reported by KASAN.

References (3)

Core 3

Core References

Patch

https://git.kernel.org/stable/c/10007bd96b6c4c3cfaea9e76c311b06a07a5e260

Patch

https://git.kernel.org/stable/c/1552e66be325a21d7eff49f46013fb402165a0ac

Patch

https://git.kernel.org/stable/c/06feec6005c9d9500cd286ec440aabf8b2ddd94d

Scores

CVSS v3 7.1

EPSS 0.0023

EPSS Percentile 14.1%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

Details

CWE

CWE-125

Status published

Products (12)

linux/Kernel 5.14.0 - 5.15.22linux

linux/Kernel 5.16.0 - 5.16.8linux

Linux/Linux < 5.14

Linux/Linux 5.14

Linux/Linux 5.15.22 - 5.15.*

Linux/Linux 5.16.8 - 5.16.*

Linux/Linux 5.17

Linux/Linux 7a8e1d44211e16eb394b7b9e0b236ee1503a3ad3 - 06feec6005c9d9500cd286ec440aabf8b2ddd94d

Linux/Linux 7a8e1d44211e16eb394b7b9e0b236ee1503a3ad3 - 10007bd96b6c4c3cfaea9e76c311b06a07a5e260

Linux/Linux 7a8e1d44211e16eb394b7b9e0b236ee1503a3ad3 - 1552e66be325a21d7eff49f46013fb402165a0ac

... and 2 more

Published Jun 20, 2024

Tracked Since Feb 18, 2026