CVE-2022-48951

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

ASoC: ops: Check bounds for second channel in snd_soc_put_volsw_sx()

The bounds checks in snd_soc_put_volsw_sx() are only being applied to the first channel, meaning it is possible to write out of bounds values to the second channel in stereo controls. Add appropriate checks.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-787

Affected software

VendorProductVersions
LinuxLinux>= 9e5c40b5706d8aae2cf70bd7e01f0b4575a642d0, < 56288987843c3cb343e81e5fa51549cbaf541bd0; >= 4977491e4b3aad8567f57e2a9992d251410c1db3, < cf1c225f1927891ae388562b78ced7840c3723b9; >= 9a12fcbf3c622f9bf6b110a873d62b0cba93972e, < 18a168d85eadcfd45f015b5ecd2a97801b959e43; >= c33402b056de61104b6146dedbe138ca8d7ec62b, < 9796d07c753164b7e6b0d7ef23fb4482840a9ef8; >= 038f8b7caa74d29e020949a43ca368c93f6b29b9, < 50b5f6d4d9d2d69a7498c44fd8b26e13d73d3d98; >= e8e07c5e25a29e2a6f119fd947f55d7a55eb8a13, < cf611d786796ec33da09d8c83d7d7f4e557b27de; >= 4f1e50d6a9cf9c1b8c859d449b5031cacfa8404e, < 1798b62d642e7b3d4ea3403914c3caf4e438465d; >= 4f1e50d6a9cf9c1b8c859d449b5031cacfa8404e, < 97eea946b93961fffd29448dcda7398d0d51c4b2; ef6cd9eeb38062a145802b7b56be7ae1090e165e; >= 4.9.300, < 4.9.337; >= 4.14.265, < 4.14.303; >= 4.19.228, < 4.19.270; >= 5.4.178, < 5.4.228; >= 5.10.99, < 5.10.160; >= 5.15.22, < 5.15.84; >= 5.16.8, < 5.17
LinuxLinux5.17

References

Timeline

Published
Oct 21, 2024
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2022

CVE-2022-489525.5In the Linux kernel, the following vulnerability has been resolved: PCI: mt7621: Add sentinel to quirks table Current driver is missing a CVE-2022-489535.5In the Linux kernel, the following vulnerability has been resolved: rtc: cmos: Fix event handler registration ordering issue Because acpi_CVE-2022-489547.8In the Linux kernel, the following vulnerability has been resolved: s390/qeth: fix use-after-free in hsci KASAN found that addr was derefeCVE-2022-489555.5In the Linux kernel, the following vulnerability has been resolved: net: thunderbolt: fix memory leak in tbnet_open() When tb_ring_alloc_rCVE-2022-489567.8In the Linux kernel, the following vulnerability has been resolved: ipv6: avoid use-after-free in ip6_fragment() Blamed commit claimed rcuCVE-2022-489575.5In the Linux kernel, the following vulnerability has been resolved: dpaa2-switch: Fix memory leak in dpaa2_switch_acl_entry_add() and dpaa2CVE-2022-489585.5In the Linux kernel, the following vulnerability has been resolved: ethernet: aeroflex: fix potential skb leak in greth_init_rings() The gCVE-2022-489595.5In the Linux kernel, the following vulnerability has been resolved: net: dsa: sja1105: fix memory leak in sja1105_setup_devlink_regions() CVE-2022-48967.5Cyber Control, in its 1.650 version, is affected by a vulnerability in the generation on the server of pop-up windows with the messages "PNTCVE-2022-489607.8In the Linux kernel, the following vulnerability has been resolved: net: hisilicon: Fix potential use-after-free in hix5hd2_rx() The skb iCVE-2022-489615.5In the Linux kernel, the following vulnerability has been resolved: net: mdio: fix unbalanced fwnode reference count in mdio_device_releaseCVE-2022-489627.8In the Linux kernel, the following vulnerability has been resolved: net: hisilicon: Fix potential use-after-free in hisi_femac_rx() The sk
CVE-2022-48951: High severity, CVSS 7.8 | Vulnix