In the Linux kernel, the following vulnerability has been resolved:
ASoC: codecs: rx-macro: fix accessing compander for aux
AUX interpolator does not have compander, so check before accessing compander data for this.
Without this checkan array of out bounds access will be made in comp_enabled[] array.
[
{
"id": "CVE-2022-49250-2d86d7f0",
"target": {
"file": "sound/soc/codecs/lpass-rx-macro.c"
},
"digest": {
"line_hashes": [
"117621949373811819053259354410238830179",
"159522516683782329011453361466696897040",
"172261034044915078641264150145172916011"
],
"threshold": 0.9
},
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@87a2b44cb3005d30c3a72234d1e47b03ae3bb29a",
"signature_type": "Line"
},
{
"id": "CVE-2022-49250-5bb75783",
"target": {
"function": "rx_macro_load_compander_coeff",
"file": "sound/soc/codecs/lpass-rx-macro.c"
},
"digest": {
"length": 664.0,
"function_hash": "10155586395046670777202926247097010598"
},
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9208ecc703b5ed5b12d7ea13c79207f4c8456638",
"signature_type": "Function"
},
{
"id": "CVE-2022-49250-7182d6c6",
"target": {
"function": "rx_macro_load_compander_coeff",
"file": "sound/soc/codecs/lpass-rx-macro.c"
},
"digest": {
"length": 664.0,
"function_hash": "10155586395046670777202926247097010598"
},
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@6aa8ef9535dbd561293406608ebe791627b10196",
"signature_type": "Function"
},
{
"id": "CVE-2022-49250-92071933",
"target": {
"file": "sound/soc/codecs/lpass-rx-macro.c"
},
"digest": {
"line_hashes": [
"117621949373811819053259354410238830179",
"159522516683782329011453361466696897040",
"172261034044915078641264150145172916011"
],
"threshold": 0.9
},
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@6aa8ef9535dbd561293406608ebe791627b10196",
"signature_type": "Line"
},
{
"id": "CVE-2022-49250-a313da6b",
"target": {
"file": "sound/soc/codecs/lpass-rx-macro.c"
},
"digest": {
"line_hashes": [
"117621949373811819053259354410238830179",
"159522516683782329011453361466696897040",
"172261034044915078641264150145172916011"
],
"threshold": 0.9
},
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9208ecc703b5ed5b12d7ea13c79207f4c8456638",
"signature_type": "Line"
},
{
"id": "CVE-2022-49250-a80c50ed",
"target": {
"function": "rx_macro_load_compander_coeff",
"file": "sound/soc/codecs/lpass-rx-macro.c"
},
"digest": {
"length": 664.0,
"function_hash": "10155586395046670777202926247097010598"
},
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@87a2b44cb3005d30c3a72234d1e47b03ae3bb29a",
"signature_type": "Function"
},
{
"id": "CVE-2022-49250-d5ed8f8a",
"target": {
"file": "sound/soc/codecs/lpass-rx-macro.c"
},
"digest": {
"line_hashes": [
"117621949373811819053259354410238830179",
"159522516683782329011453361466696897040",
"172261034044915078641264150145172916011"
],
"threshold": 0.9
},
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@42c709c4e1ce4c136891530646c9abd5dff3524f",
"signature_type": "Line"
},
{
"id": "CVE-2022-49250-ed6c6d76",
"target": {
"function": "rx_macro_load_compander_coeff",
"file": "sound/soc/codecs/lpass-rx-macro.c"
},
"digest": {
"length": 664.0,
"function_hash": "10155586395046670777202926247097010598"
},
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@42c709c4e1ce4c136891530646c9abd5dff3524f",
"signature_type": "Function"
}
]