CVE-2022-48951

Katalog CVE

CVSS 7.8 · High EPSS 0,25%

Kerentanan Out-of-bounds Write pada linux kernel. Skor CVSS 3.1 7.8 (High) menurut NVD.

Deskripsi (NVD)

In the Linux kernel, the following vulnerability has been resolved: ASoC: ops: Check bounds for second channel in snd_soc_put_volsw_sx() The bounds checks in snd_soc_put_volsw_sx() are only being applied to the first channel, meaning it is possible to write out of bounds values to the second channel in stereo controls. Add appropriate checks.

Rincian

Terbit di NVD

21 Oktober 2024

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

7.8 (High), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-787: Out-of-bounds Write

EPSS (30 hari)

0,25% peluang dieksploitasi; lebih tinggi dari 14,6% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://git.kernel.org/stable/c/1798b62d642e7b3d4ea3403914c3caf4e438465d patch
• https://git.kernel.org/stable/c/18a168d85eadcfd45f015b5ecd2a97801b959e43 patch
• https://git.kernel.org/stable/c/50b5f6d4d9d2d69a7498c44fd8b26e13d73d3d98 patch
• https://git.kernel.org/stable/c/56288987843c3cb343e81e5fa51549cbaf541bd0 patch
• https://git.kernel.org/stable/c/9796d07c753164b7e6b0d7ef23fb4482840a9ef8 patch
• https://git.kernel.org/stable/c/97eea946b93961fffd29448dcda7398d0d51c4b2 patch
• https://git.kernel.org/stable/c/cf1c225f1927891ae388562b78ced7840c3723b9 patch
• https://git.kernel.org/stable/c/cf611d786796ec33da09d8c83d7d7f4e557b27de patch