CVE-2022-48951

ASoC: ops: Check bounds for second channel in snd_soc_put_volsw_sx()

published October 21, 2024

CVSS
—
EPSS
0%
Percentile
14.9
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

ASoC: ops: Check bounds for second channel in snd_soc_put_volsw_sx()

The bounds checks in snd_soc_put_volsw_sx() are only being applied to the

first channel, meaning it is possible to write out of bounds values to the

second channel in stereo controls. Add appropriate checks.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00245 · 14.9th percentile
Published
2024-10-21T20:05Z
EPSS history
Timeline
  • 21 OCT 20:05Z
    ASoC: ops: Check bounds for second channel in snd_soc_put_volsw_sx()
    cvelistv5