CVE-2022-50325

HIGH

Linux Kernel 5.18-6.0.15, 6.1.0-6.1.1 - Out-of-bounds Write in ASoC Intel AVS RX Buffer Handling

Title source: llm

Description

In the Linux kernel, the following vulnerability has been resolved: ASoC: Intel: avs: Fix potential RX buffer overflow If an event caused firmware to return invalid RX size for LARGE_CONFIG_GET, memcpy_fromio() could end up copying too many bytes. Fix by utilizing min_t().

References (3)

Core 3

Core References

Patch

https://git.kernel.org/stable/c/ec1f0c12cb2e614c3fa8e9402f7ffcf82166078a

Patch

https://git.kernel.org/stable/c/0bad12fee5ae16ab439d97c66c4238f5f4cc7f68

Patch

https://git.kernel.org/stable/c/23ae34e033b2c0e5e88237af82b163b296fd6aa9

Scores

CVSS v3 7.8

EPSS 0.0017

EPSS Percentile 6.3%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Details

CWE

CWE-787

Status published

Products (11)

linux/Kernel 5.18.0 - 6.0.16linux

linux/Kernel 6.1.0 - 6.1.2linux

Linux/Linux < 5.18

Linux/Linux 5.18

Linux/Linux 6.0.16 - 6.0.*

Linux/Linux 6.1.2 - 6.1.*

Linux/Linux 6.2

Linux/Linux f14a1c5a9f830025dc8638303ddefd5f731ae4bc - 0bad12fee5ae16ab439d97c66c4238f5f4cc7f68

Linux/Linux f14a1c5a9f830025dc8638303ddefd5f731ae4bc - 23ae34e033b2c0e5e88237af82b163b296fd6aa9

Linux/Linux f14a1c5a9f830025dc8638303ddefd5f731ae4bc - ec1f0c12cb2e614c3fa8e9402f7ffcf82166078a

... and 1 more

Published Sep 15, 2025

Tracked Since Feb 18, 2026