CVE-2022-48717CWE-787

CVE-2022-48717

High · published June 20, 2024

CVSS v3.1
7.1
EPSS
0%
Percentile
11.7
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

ASoC: max9759: fix underflow in speaker_gain_control_put()

Check for negative values of "priv->gain" to prevent an out of bounds

access. The concern is that these might come from the user via:

-> snd_ctl_elem_write_user()

-> snd_ctl_elem_write()

-> kctl->put()

The record
Technical detail
CVSS v3.1
7.1 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00219 · 11.7th percentile
Weakness
CWE-787 · Out-of-bounds Write
Published
2024-06-20T15:15Z
Affected products (7)
ProductVersionsFixed in
linux/linux_kernel≥ 4.17, < 4.19.2284.19.228
linux/linux_kernel≥ 4.20, < 5.4.1785.4.178
linux/linux_kernel≥ 5.5, < 5.10.995.10.99
linux/linux_kernel≥ 5.11, < 5.15.225.15.22
linux/linux_kernel≥ 5.16, < 5.16.85.16.8
linux/linux_kernelall versions—
linux/linux_kernelall versions—
References (12)
EPSS history
Timeline
  • 20 JUN 11:13Z
    ASoC: max9759: fix underflow in speaker_gain_control_put()
    cvelistv5