CVE-2022-48716

HighCVSS 7.8/10Last modified Aug 4, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

ASoC: codecs: wcd938x: fix incorrect used of portid

Mixer controls have the channel id in mixer->reg, which is not same as port id. port id should be derived from chan_info array. So fix this. Without this, its possible that we could corrupt struct wcd938x_sdw_priv by accessing port_map array out of range with channel id instead of port id.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-400

Affected software

VendorProductVersions
LinuxLinux>= e8ba1e05bdc016700c85fad559a812c2e795442f, < aa7152f9f117b3e66b3c0d4158ca4c6d46ab229f; >= e8ba1e05bdc016700c85fad559a812c2e795442f, < 9167f2712dc8c24964840a4d1e2ebf130e846b95; >= e8ba1e05bdc016700c85fad559a812c2e795442f, < c5c1546a654f613e291a7c5d6f3660fc1eb6d0c7
LinuxLinux5.14
linuxlinux_kernel>= e8ba1e05bdc0, < aa7152f9f117
linuxlinux_kernel>= e8ba1e05bdc0, < 9167f2712dc8
linuxlinux_kernel>= e8ba1e05bdc0, < c5c1546a654f
linuxlinux_kernel5.14
linuxlinux_kernel—
linuxlinux_kernel—
linuxlinux_kernel—
linuxlinux_kernel—

References

Timeline

Published
Jun 20, 2024
Last modified
Aug 4, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-487177.8In the Linux kernel, the following vulnerability has been resolved: ASoC: max9759: fix underflow in speaker_gain_control_put() Check for nCVE-2022-487185.5In the Linux kernel, the following vulnerability has been resolved: drm: mxsfb: Fix NULL pointer dereference mxsfb should not ever dereferCVE-2022-487195.5In the Linux kernel, the following vulnerability has been resolved: net, neigh: Do not trigger immediate probes on NUD_FAILED from neigh_maCVE-2022-48724.3The Chained Products WordPress plugin before 2.12.0 does not have authorisation and CSRF checks, as well as does not ensure that the option CVE-2022-487205.5In the Linux kernel, the following vulnerability has been resolved: net: macsec: Fix offload support for NETDEV_UNREGISTER event Current mCVE-2022-487215.5In the Linux kernel, the following vulnerability has been resolved: net/smc: Forward wakeup to smc socket waitqueue after fallback When weCVE-2022-487225.5In the Linux kernel, the following vulnerability has been resolved: net: ieee802154: ca8210: Stop leaking skb's Upon error the ieee802154_CVE-2022-487235.5In the Linux kernel, the following vulnerability has been resolved: spi: uniphier: fix reference count leak in uniphier_spi_probe() The isCVE-2022-487245.5In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Fix potential memory leak in intel_setup_irq_remapping() ACVE-2022-487255.5In the Linux kernel, the following vulnerability has been resolved: RDMA/siw: Fix refcounting leak in siw_create_qp() The atomic_inc() neeCVE-2022-487267.8In the Linux kernel, the following vulnerability has been resolved: RDMA/ucma: Protect mc during concurrent multicast leaves Partially revCVE-2022-487275.5In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Avoid consuming a stale esr value when SError occur When a
CVE-2022-48716: High severity, CVSS 7.8 | Vulnix