In the Linux kernel, the following vulnerability has been resolved:
ASoC: ops: Check bounds for second channel in sndsocputvolswsx()
The bounds checks in sndsocputvolswsx() are only being applied to the first channel, meaning it is possible to write out of bounds values to the second channel in stereo controls. Add appropriate checks.
[
{
"id": "CVE-2022-48951-0b369686",
"target": {
"file": "sound/soc/soc-ops.c"
},
"signature_version": "v1",
"digest": {
"line_hashes": [
"202495244139168679969234664568658092841",
"197995328910361685797219199243254181975",
"43959944421950352416675468135608895304",
"19350473786309597442211285024915042375"
],
"threshold": 0.9
},
"deprecated": false,
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9796d07c753164b7e6b0d7ef23fb4482840a9ef8"
},
{
"id": "CVE-2022-48951-21b39d98",
"target": {
"function": "snd_soc_put_volsw_sx",
"file": "sound/soc/soc-ops.c"
},
"signature_version": "v1",
"digest": {
"length": 957.0,
"function_hash": "137562092881052335889582371646541366701"
},
"deprecated": false,
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9796d07c753164b7e6b0d7ef23fb4482840a9ef8"
},
{
"id": "CVE-2022-48951-2d030b21",
"target": {
"function": "snd_soc_put_volsw_sx",
"file": "sound/soc/soc-ops.c"
},
"signature_version": "v1",
"digest": {
"length": 957.0,
"function_hash": "137562092881052335889582371646541366701"
},
"deprecated": false,
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@50b5f6d4d9d2d69a7498c44fd8b26e13d73d3d98"
},
{
"id": "CVE-2022-48951-30c705ee",
"target": {
"file": "sound/soc/soc-ops.c"
},
"signature_version": "v1",
"digest": {
"line_hashes": [
"244720810189185292025317584002182797893",
"24459435376930504582052628125799977992",
"43959944421950352416675468135608895304",
"19350473786309597442211285024915042375"
],
"threshold": 0.9
},
"deprecated": false,
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1798b62d642e7b3d4ea3403914c3caf4e438465d"
},
{
"id": "CVE-2022-48951-41e55478",
"target": {
"file": "sound/soc/soc-ops.c"
},
"signature_version": "v1",
"digest": {
"line_hashes": [
"202495244139168679969234664568658092841",
"197995328910361685797219199243254181975",
"43959944421950352416675468135608895304",
"19350473786309597442211285024915042375"
],
"threshold": 0.9
},
"deprecated": false,
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@50b5f6d4d9d2d69a7498c44fd8b26e13d73d3d98"
},
{
"id": "CVE-2022-48951-7bf6cd72",
"target": {
"function": "snd_soc_put_volsw_sx",
"file": "sound/soc/soc-ops.c"
},
"signature_version": "v1",
"digest": {
"length": 947.0,
"function_hash": "196668438173733309979242198787572823886"
},
"deprecated": false,
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@56288987843c3cb343e81e5fa51549cbaf541bd0"
},
{
"id": "CVE-2022-48951-814718b1",
"target": {
"function": "snd_soc_put_volsw_sx",
"file": "sound/soc/soc-ops.c"
},
"signature_version": "v1",
"digest": {
"length": 1035.0,
"function_hash": "8013454870908981048224254813951840323"
},
"deprecated": false,
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@cf611d786796ec33da09d8c83d7d7f4e557b27de"
},
{
"id": "CVE-2022-48951-8f884d6f",
"target": {
"file": "sound/soc/soc-ops.c"
},
"signature_version": "v1",
"digest": {
"line_hashes": [
"202495244139168679969234664568658092841",
"197995328910361685797219199243254181975",
"43959944421950352416675468135608895304",
"19350473786309597442211285024915042375"
],
"threshold": 0.9
},
"deprecated": false,
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@56288987843c3cb343e81e5fa51549cbaf541bd0"
},
{
"id": "CVE-2022-48951-a5901278",
"target": {
"file": "sound/soc/soc-ops.c"
},
"signature_version": "v1",
"digest": {
"line_hashes": [
"244720810189185292025317584002182797893",
"24459435376930504582052628125799977992",
"43959944421950352416675468135608895304",
"19350473786309597442211285024915042375"
],
"threshold": 0.9
},
"deprecated": false,
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@97eea946b93961fffd29448dcda7398d0d51c4b2"
},
{
"id": "CVE-2022-48951-b40380a6",
"target": {
"function": "snd_soc_put_volsw_sx",
"file": "sound/soc/soc-ops.c"
},
"signature_version": "v1",
"digest": {
"length": 947.0,
"function_hash": "196668438173733309979242198787572823886"
},
"deprecated": false,
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@cf1c225f1927891ae388562b78ced7840c3723b9"
},
{
"id": "CVE-2022-48951-b5a6efb1",
"target": {
"function": "snd_soc_put_volsw_sx",
"file": "sound/soc/soc-ops.c"
},
"signature_version": "v1",
"digest": {
"length": 1070.0,
"function_hash": "130836819930387974971466376191598142115"
},
"deprecated": false,
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1798b62d642e7b3d4ea3403914c3caf4e438465d"
},
{
"id": "CVE-2022-48951-b722dc55",
"target": {
"file": "sound/soc/soc-ops.c"
},
"signature_version": "v1",
"digest": {
"line_hashes": [
"244720810189185292025317584002182797893",
"24459435376930504582052628125799977992",
"43959944421950352416675468135608895304",
"19350473786309597442211285024915042375"
],
"threshold": 0.9
},
"deprecated": false,
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@cf611d786796ec33da09d8c83d7d7f4e557b27de"
},
{
"id": "CVE-2022-48951-c61a79ee",
"target": {
"function": "snd_soc_put_volsw_sx",
"file": "sound/soc/soc-ops.c"
},
"signature_version": "v1",
"digest": {
"length": 957.0,
"function_hash": "137562092881052335889582371646541366701"
},
"deprecated": false,
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@18a168d85eadcfd45f015b5ecd2a97801b959e43"
},
{
"id": "CVE-2022-48951-cd10698f",
"target": {
"file": "sound/soc/soc-ops.c"
},
"signature_version": "v1",
"digest": {
"line_hashes": [
"202495244139168679969234664568658092841",
"197995328910361685797219199243254181975",
"43959944421950352416675468135608895304",
"19350473786309597442211285024915042375"
],
"threshold": 0.9
},
"deprecated": false,
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@cf1c225f1927891ae388562b78ced7840c3723b9"
},
{
"id": "CVE-2022-48951-f51494c5",
"target": {
"function": "snd_soc_put_volsw_sx",
"file": "sound/soc/soc-ops.c"
},
"signature_version": "v1",
"digest": {
"length": 1070.0,
"function_hash": "130836819930387974971466376191598142115"
},
"deprecated": false,
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@97eea946b93961fffd29448dcda7398d0d51c4b2"
},
{
"id": "CVE-2022-48951-f81422af",
"target": {
"file": "sound/soc/soc-ops.c"
},
"signature_version": "v1",
"digest": {
"line_hashes": [
"202495244139168679969234664568658092841",
"197995328910361685797219199243254181975",
"43959944421950352416675468135608895304",
"19350473786309597442211285024915042375"
],
"threshold": 0.9
},
"deprecated": false,
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@18a168d85eadcfd45f015b5ecd2a97801b959e43"
}
]