CVE-2022-48738— ASoC: ops: Reject out of bounds values in snd_soc_put_volsw()
Affected Version Matrix 18
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Linux | Linux | f227b88f0fce5f9b82aa934f8829a741c2e06d82< 40f598698129b5ceaf31012f9501b775c7b6e57d | affected |
f227b88f0fce5f9b82aa934f8829a741c2e06d82< 586ef863c94354a7e00e5ae5ef01443d1dc99bc7 | affected | ||
f227b88f0fce5f9b82aa934f8829a741c2e06d82< 65a61b1f56f5386486757930069fbdce94af08bf | affected | ||
f227b88f0fce5f9b82aa934f8829a741c2e06d82< 68fd718724284788fc5f379e0b7cac541429ece7 | affected | ||
f227b88f0fce5f9b82aa934f8829a741c2e06d82< a9394f21fba027147bf275b083c77955864c366a | affected | ||
f227b88f0fce5f9b82aa934f8829a741c2e06d82< 9e8895f1b3d4433f6d78aa6578e9db61ca6e6830 | affected | ||
f227b88f0fce5f9b82aa934f8829a741c2e06d82< bb72d2dda85564c66d909108ea6903937a41679d | affected | ||
f227b88f0fce5f9b82aa934f8829a741c2e06d82< 817f7c9335ec01e0f5e8caffc4f1dcd5e458a4c0 | affected | ||
| … +10 more rows | |||
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2022-48738
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
ASoC: ops: Reject out of bounds values in snd_soc_put_volsw()
Source: NVD (National Vulnerability Database)
Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: ASoC: ops: Reject out of bounds values in snd_soc_put_volsw() We don't currently validate that the values being set are within the range we advertised to userspace as being valid, do so and reject any values that are out of range.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Linux kernel 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel 存在安全漏洞，该漏洞源于 ASoC:ops 模块 snd_soc_put_volsw 方法存在越界问题。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
II. Public POCs for CVE-2022-48738
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2022-48738
请登录查看更多情报信息。
Other References for CVE-2022-48738 (8)
Same Patch Batch · Linux · 2024-06-20 · 67 CVEs total
| CVE-2022-48751 | net/smc: Transitional solution for clcsock race issue | |
| CVE-2022-48770 | bpf: Guard against accessing NULL pt_regs in bpf_get_task_stack() | |
| CVE-2022-48768 | tracing/histogram: Fix a potential memory leak for kstrdup() | |
| CVE-2022-48769 | efi: runtime: avoid EFIv2 runtime services on Apple x86 machines | |
| CVE-2022-48757 | net: fix information leakage in /proc/net/ptype | |
| CVE-2022-48756 | drm/msm/dsi: invalid parameter check in msm_dsi_phy_enable | |
| CVE-2022-48755 | powerpc64/bpf: Limit 'ldbrx' to processors compliant with ISA v2.06 | |
| CVE-2022-48754 | phylib: fix potential use-after-free | |
| CVE-2022-48753 | block: fix memory leak in disk_register_independent_access_ranges | |
| CVE-2022-48752 | powerpc/perf: Fix power_pmu_disable to call clear_pmi_irq_pending only if PMI is pending | |
| CVE-2022-48758 | scsi: bnx2fc: Flush destroy_work queue before calling bnx2fc_interface_put() | |
| CVE-2022-48750 | hwmon: (nct6775) Fix crash in clear_caseopen | |
| CVE-2022-48748 | net: bridge: vlan: fix memory leak in __allowed_ingress | |
| CVE-2022-48749 | drm/msm/dpu: invalid parameter check in dpu_setup_dspp_pcc | |
| CVE-2022-48747 | block: Fix wrong offset in bio_truncate() | |
| CVE-2022-48745 | net/mlx5: Use del_timer_sync in fw reset flow of halting poll | |
| CVE-2022-48746 | net/mlx5e: Fix handling of wrong devices during bond netevent | |
| CVE-2022-48744 | net/mlx5e: Avoid field-overflowing memcpy() | |
| CVE-2022-48743 | net: amd-xgbe: Fix skb data length underflow | |
| CVE-2022-48742 | rtnetlink: make sure to refresh master_dev/m_ops in __rtnl_newlink() |
Showing top 20 of 67 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
Same product: Linux
- CVE-2026-46300
net: skbuff: preserve shared-frag marker during coalescing - CVE-2026-43503
net: skbuff: propagate shared-frag marker through frag-trans - CVE-2026-43502
net/rds: handle zerocopy send cleanup before the message is - CVE-2026-43501
ipv6: rpl: reserve mac_len headroom when recompressed SRH gr - CVE-2026-43498
accel/ivpu: Disallow re-exporting imported GEM objects
Same vendor: Linux
- CVE-2026-46300
net: skbuff: preserve shared-frag marker during coalescing - CVE-2026-43503
net: skbuff: propagate shared-frag marker through frag-trans - CVE-2026-43502
net/rds: handle zerocopy send cleanup before the message is - CVE-2026-43501
ipv6: rpl: reserve mac_len headroom when recompressed SRH gr - CVE-2026-43498
accel/ivpu: Disallow re-exporting imported GEM objects
V. Comments for CVE-2022-48738
No comments yet