In the Linux kernel, the following vulnerability has been resolved:
ASoC: ops: Reject out of bounds values in sndsocput_volsw()
We don't currently validate that the values being set are within the range we advertised to userspace as being valid, do so and reject any values that are out of range.
[
{
"id": "CVE-2022-48738-0caf0a4e",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@817f7c9335ec01e0f5e8caffc4f1dcd5e458a4c0",
"signature_version": "v1",
"deprecated": false,
"target": {
"function": "snd_soc_put_volsw",
"file": "sound/soc/soc-ops.c"
},
"digest": {
"length": 1073.0,
"function_hash": "162196086409659812725759227997567577281"
},
"signature_type": "Function"
},
{
"id": "CVE-2022-48738-14d90e67",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@40f598698129b5ceaf31012f9501b775c7b6e57d",
"signature_version": "v1",
"deprecated": false,
"target": {
"function": "snd_soc_put_volsw",
"file": "sound/soc/soc-ops.c"
},
"digest": {
"length": 1073.0,
"function_hash": "162196086409659812725759227997567577281"
},
"signature_type": "Function"
},
{
"id": "CVE-2022-48738-16e9c81e",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@68fd718724284788fc5f379e0b7cac541429ece7",
"signature_version": "v1",
"deprecated": false,
"target": {
"function": "snd_soc_put_volsw",
"file": "sound/soc/soc-ops.c"
},
"digest": {
"length": 1073.0,
"function_hash": "162196086409659812725759227997567577281"
},
"signature_type": "Function"
},
{
"id": "CVE-2022-48738-21c2d70b",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@586ef863c94354a7e00e5ae5ef01443d1dc99bc7",
"signature_version": "v1",
"deprecated": false,
"target": {
"file": "sound/soc/soc-ops.c"
},
"digest": {
"line_hashes": [
"282229388835654916099683874391913388539",
"298549083219697942371885236882486659460",
"59245080083691430156504590060492311637",
"331996657892636857580672603260322977604",
"67770255352674746250689609354804953665",
"20094695429188690456285115067426084278",
"42125466073301535997163330672135441059",
"189818281547709342768567768551075586542",
"120230885974629219546368377603496513256",
"244600965576389193053898739127851757528"
],
"threshold": 0.9
},
"signature_type": "Line"
},
{
"id": "CVE-2022-48738-28bc1306",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a9394f21fba027147bf275b083c77955864c366a",
"signature_version": "v1",
"deprecated": false,
"target": {
"function": "snd_soc_put_volsw",
"file": "sound/soc/soc-ops.c"
},
"digest": {
"length": 1073.0,
"function_hash": "162196086409659812725759227997567577281"
},
"signature_type": "Function"
},
{
"id": "CVE-2022-48738-47c6062d",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@65a61b1f56f5386486757930069fbdce94af08bf",
"signature_version": "v1",
"deprecated": false,
"target": {
"function": "snd_soc_put_volsw",
"file": "sound/soc/soc-ops.c"
},
"digest": {
"length": 1073.0,
"function_hash": "162196086409659812725759227997567577281"
},
"signature_type": "Function"
},
{
"id": "CVE-2022-48738-50b5fd21",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a9394f21fba027147bf275b083c77955864c366a",
"signature_version": "v1",
"deprecated": false,
"target": {
"file": "sound/soc/soc-ops.c"
},
"digest": {
"line_hashes": [
"282229388835654916099683874391913388539",
"298549083219697942371885236882486659460",
"59245080083691430156504590060492311637",
"331996657892636857580672603260322977604",
"67770255352674746250689609354804953665",
"20094695429188690456285115067426084278",
"42125466073301535997163330672135441059",
"189818281547709342768567768551075586542",
"120230885974629219546368377603496513256",
"244600965576389193053898739127851757528"
],
"threshold": 0.9
},
"signature_type": "Line"
},
{
"id": "CVE-2022-48738-5f334072",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@68fd718724284788fc5f379e0b7cac541429ece7",
"signature_version": "v1",
"deprecated": false,
"target": {
"file": "sound/soc/soc-ops.c"
},
"digest": {
"line_hashes": [
"282229388835654916099683874391913388539",
"298549083219697942371885236882486659460",
"59245080083691430156504590060492311637",
"331996657892636857580672603260322977604",
"67770255352674746250689609354804953665",
"20094695429188690456285115067426084278",
"42125466073301535997163330672135441059",
"189818281547709342768567768551075586542",
"120230885974629219546368377603496513256",
"244600965576389193053898739127851757528"
],
"threshold": 0.9
},
"signature_type": "Line"
},
{
"id": "CVE-2022-48738-65eff803",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@bb72d2dda85564c66d909108ea6903937a41679d",
"signature_version": "v1",
"deprecated": false,
"target": {
"file": "sound/soc/soc-ops.c"
},
"digest": {
"line_hashes": [
"282229388835654916099683874391913388539",
"298549083219697942371885236882486659460",
"59245080083691430156504590060492311637",
"331996657892636857580672603260322977604",
"67770255352674746250689609354804953665",
"20094695429188690456285115067426084278",
"42125466073301535997163330672135441059",
"189818281547709342768567768551075586542",
"120230885974629219546368377603496513256",
"244600965576389193053898739127851757528"
],
"threshold": 0.9
},
"signature_type": "Line"
},
{
"id": "CVE-2022-48738-83017b5f",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9e8895f1b3d4433f6d78aa6578e9db61ca6e6830",
"signature_version": "v1",
"deprecated": false,
"target": {
"file": "sound/soc/soc-ops.c"
},
"digest": {
"line_hashes": [
"282229388835654916099683874391913388539",
"298549083219697942371885236882486659460",
"59245080083691430156504590060492311637",
"331996657892636857580672603260322977604",
"67770255352674746250689609354804953665",
"20094695429188690456285115067426084278",
"42125466073301535997163330672135441059",
"189818281547709342768567768551075586542",
"120230885974629219546368377603496513256",
"244600965576389193053898739127851757528"
],
"threshold": 0.9
},
"signature_type": "Line"
},
{
"id": "CVE-2022-48738-8c8f7ecb",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@bb72d2dda85564c66d909108ea6903937a41679d",
"signature_version": "v1",
"deprecated": false,
"target": {
"function": "snd_soc_put_volsw",
"file": "sound/soc/soc-ops.c"
},
"digest": {
"length": 1073.0,
"function_hash": "162196086409659812725759227997567577281"
},
"signature_type": "Function"
},
{
"id": "CVE-2022-48738-a59fdaf5",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9e8895f1b3d4433f6d78aa6578e9db61ca6e6830",
"signature_version": "v1",
"deprecated": false,
"target": {
"function": "snd_soc_put_volsw",
"file": "sound/soc/soc-ops.c"
},
"digest": {
"length": 1073.0,
"function_hash": "162196086409659812725759227997567577281"
},
"signature_type": "Function"
},
{
"id": "CVE-2022-48738-d6b8d566",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@586ef863c94354a7e00e5ae5ef01443d1dc99bc7",
"signature_version": "v1",
"deprecated": false,
"target": {
"function": "snd_soc_put_volsw",
"file": "sound/soc/soc-ops.c"
},
"digest": {
"length": 1073.0,
"function_hash": "162196086409659812725759227997567577281"
},
"signature_type": "Function"
},
{
"id": "CVE-2022-48738-d78b68f9",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@65a61b1f56f5386486757930069fbdce94af08bf",
"signature_version": "v1",
"deprecated": false,
"target": {
"file": "sound/soc/soc-ops.c"
},
"digest": {
"line_hashes": [
"282229388835654916099683874391913388539",
"298549083219697942371885236882486659460",
"59245080083691430156504590060492311637",
"331996657892636857580672603260322977604",
"67770255352674746250689609354804953665",
"20094695429188690456285115067426084278",
"42125466073301535997163330672135441059",
"189818281547709342768567768551075586542",
"120230885974629219546368377603496513256",
"244600965576389193053898739127851757528"
],
"threshold": 0.9
},
"signature_type": "Line"
},
{
"id": "CVE-2022-48738-de08bf6d",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@817f7c9335ec01e0f5e8caffc4f1dcd5e458a4c0",
"signature_version": "v1",
"deprecated": false,
"target": {
"file": "sound/soc/soc-ops.c"
},
"digest": {
"line_hashes": [
"282229388835654916099683874391913388539",
"298549083219697942371885236882486659460",
"59245080083691430156504590060492311637",
"331996657892636857580672603260322977604",
"67770255352674746250689609354804953665",
"20094695429188690456285115067426084278",
"42125466073301535997163330672135441059",
"189818281547709342768567768551075586542",
"120230885974629219546368377603496513256",
"244600965576389193053898739127851757528"
],
"threshold": 0.9
},
"signature_type": "Line"
},
{
"id": "CVE-2022-48738-f5912b25",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@40f598698129b5ceaf31012f9501b775c7b6e57d",
"signature_version": "v1",
"deprecated": false,
"target": {
"file": "sound/soc/soc-ops.c"
},
"digest": {
"line_hashes": [
"282229388835654916099683874391913388539",
"298549083219697942371885236882486659460",
"59245080083691430156504590060492311637",
"331996657892636857580672603260322977604",
"67770255352674746250689609354804953665",
"20094695429188690456285115067426084278",
"42125466073301535997163330672135441059",
"189818281547709342768567768551075586542",
"120230885974629219546368377603496513256",
"244600965576389193053898739127851757528"
],
"threshold": 0.9
},
"signature_type": "Line"
}
]