CVE-2022-48717

HighCVSS 7.8/10Last modified Aug 4, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

ASoC: max9759: fix underflow in speaker_gain_control_put()

Check for negative values of "priv->gain" to prevent an out of bounds access. The concern is that these might come from the user via: -> snd_ctl_elem_write_user() -> snd_ctl_elem_write() -> kctl->put()

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-787

Affected software

VendorProductVersions
LinuxLinux>= fa8d915172b8c10ec0734c4021e99e9705023b07, < a0f49d12547d45ea8b0f356a96632dd503941c1e; >= fa8d915172b8c10ec0734c4021e99e9705023b07, < 71e60c170105d153e34d01766c1e4db26a4b24cc; >= fa8d915172b8c10ec0734c4021e99e9705023b07, < 5a45448ac95b715173edb1cd090ff24b6586d921; >= fa8d915172b8c10ec0734c4021e99e9705023b07, < baead410e5db49e962a67fffc17ac30e44b50b7c; >= fa8d915172b8c10ec0734c4021e99e9705023b07, < f114fd6165dfb52520755cc4d1c1dfbd447b88b6; >= fa8d915172b8c10ec0734c4021e99e9705023b07, < 4c907bcd9dcd233da6707059d777ab389dcbd964
LinuxLinux4.17

References

Timeline

Published
Jun 20, 2024
Last modified
Aug 4, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-487185.5In the Linux kernel, the following vulnerability has been resolved: drm: mxsfb: Fix NULL pointer dereference mxsfb should not ever dereferCVE-2022-487195.5In the Linux kernel, the following vulnerability has been resolved: net, neigh: Do not trigger immediate probes on NUD_FAILED from neigh_maCVE-2022-48724.3The Chained Products WordPress plugin before 2.12.0 does not have authorisation and CSRF checks, as well as does not ensure that the option CVE-2022-487205.5In the Linux kernel, the following vulnerability has been resolved: net: macsec: Fix offload support for NETDEV_UNREGISTER event Current mCVE-2022-487215.5In the Linux kernel, the following vulnerability has been resolved: net/smc: Forward wakeup to smc socket waitqueue after fallback When weCVE-2022-487225.5In the Linux kernel, the following vulnerability has been resolved: net: ieee802154: ca8210: Stop leaking skb's Upon error the ieee802154_CVE-2022-487235.5In the Linux kernel, the following vulnerability has been resolved: spi: uniphier: fix reference count leak in uniphier_spi_probe() The isCVE-2022-487245.5In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Fix potential memory leak in intel_setup_irq_remapping() ACVE-2022-487255.5In the Linux kernel, the following vulnerability has been resolved: RDMA/siw: Fix refcounting leak in siw_create_qp() The atomic_inc() neeCVE-2022-487267.8In the Linux kernel, the following vulnerability has been resolved: RDMA/ucma: Protect mc during concurrent multicast leaves Partially revCVE-2022-487275.5In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Avoid consuming a stale esr value when SError occur When aCVE-2022-487285.5In the Linux kernel, the following vulnerability has been resolved: IB/hfi1: Fix AIP early init panic An early failure in hfi1_ipoib_setup
CVE-2022-48717: High severity, CVSS 7.8 | Vulnix