Log in Start free

Vulnerability · Published Jun 20, 2024 · Assigned by Linux

CVE-2022-48738ASoC: ops: Reject out of bounds values in snd_soc_put_volsw()

High 7.1

In plain English

A high-severity security flaw in Linux from Linux. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 14% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS NVD)7.1High
Exploit odds (30 days)0.2%top 85.6% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

In the Linux kernel, the following vulnerability has been resolved: ASoC: ops: Reject out of bounds values in snd_soc_put_volsw() We don't currently validate that the values being set are within the range we advertised to userspace as being valid, do so and reject any values that are out of range.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Debian:12linux5.16.10-1DEBIAN-CVE-2022-48738
Debian:13linux5.16.10-1DEBIAN-CVE-2022-48738
Debian:14linux5.16.10-1DEBIAN-CVE-2022-48738
Ubuntu:22.04:LTSlinux-allwinner-5.19no fix listedUBUNTU-CVE-2022-48738
Ubuntu:22.04:LTSlinux-aws-5.19no fix listedUBUNTU-CVE-2022-48738
Ubuntu:22.04:LTSlinux-aws-6.2no fix listedUBUNTU-CVE-2022-48738
Ubuntu:22.04:LTSlinux-azure-5.19no fix listedUBUNTU-CVE-2022-48738
Ubuntu:22.04:LTSlinux-azure-6.2no fix listedUBUNTU-CVE-2022-48738
Ubuntu:22.04:LTSlinux-azure-fde-5.19no fix listedUBUNTU-CVE-2022-48738
Ubuntu:22.04:LTSlinux-azure-fde-6.2no fix listedUBUNTU-CVE-2022-48738
Ubuntu:22.04:LTSlinux-gcp-5.19no fix listedUBUNTU-CVE-2022-48738
Ubuntu:22.04:LTSlinux-gcp-6.2no fix listedUBUNTU-CVE-2022-48738
Ubuntu:22.04:LTSlinux-hwe-5.19no fix listedUBUNTU-CVE-2022-48738
Ubuntu:22.04:LTSlinux-hwe-6.2no fix listedUBUNTU-CVE-2022-48738
Ubuntu:22.04:LTSlinux-intel-iot-realtimeno fix listedUBUNTU-CVE-2022-48738
Ubuntu:22.04:LTSlinux-lowlatency-hwe-5.19no fix listedUBUNTU-CVE-2022-48738
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.2no fix listedUBUNTU-CVE-2022-48738
Ubuntu:22.04:LTSlinux-nvidia-6.2no fix listedUBUNTU-CVE-2022-48738
Ubuntu:22.04:LTSlinux-oem-5.17no fix listedUBUNTU-CVE-2022-48738
Ubuntu:22.04:LTSlinux-oem-6.0no fix listedUBUNTU-CVE-2022-48738
Ubuntu:22.04:LTSlinux-oem-6.1no fix listedUBUNTU-CVE-2022-48738
Ubuntu:24.04:LTSlinux-raspi-realtimeno fix listedUBUNTU-CVE-2022-48738
Ubuntu:22.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2022-48738
Ubuntu:22.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2022-48738
Ubuntu:22.04:LTSlinux-riscv-5.19no fix listedUBUNTU-CVE-2022-48738
Ubuntu:22.04:LTSlinux-starfive-5.19no fix listedUBUNTU-CVE-2022-48738
Ubuntu:22.04:LTSlinux-starfive-6.2no fix listedUBUNTU-CVE-2022-48738

Affected products (as reported)

VendorProductVersions
Linux Linux f227b88f0fce5f9b82aa934f8829a741c2e06d82 – before 40f598698129b5ceaf31012f9501b775c7b6e57df227b88f0fce5f9b82aa934f8829a741c2e06d82 – before 586ef863c94354a7e00e5ae5ef01443d1dc99bc7f227b88f0fce5f9b82aa934f8829a741c2e06d82 – before 65a61b1f56f5386486757930069fbdce94af08bff227b88f0fce5f9b82aa934f8829a741c2e06d82 – before 68fd718724284788fc5f379e0b7cac541429ece7f227b88f0fce5f9b82aa934f8829a741c2e06d82 – before a9394f21fba027147bf275b083c77955864c366af227b88f0fce5f9b82aa934f8829a741c2e06d82 – before 9e8895f1b3d4433f6d78aa6578e9db61ca6e6830f227b88f0fce5f9b82aa934f8829a741c2e06d82 – before bb72d2dda85564c66d909108ea6903937a41679df227b88f0fce5f9b82aa934f8829a741c2e06d82 – before 817f7c9335ec01e0f5e8caffc4f1dcd5e458a4c0
Linux Linux 3.15

References