CVE-2022-49498

See a problem?
Please try reporting it to the source first.
Source
https://nvd.nist.gov/vuln/detail/CVE-2022-49498
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-49498.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2022-49498
Downstream
Related
Published
2025-02-26T02:13:32Z
Modified
2025-10-21T10:48:38.507253Z
Severity
  • 5.5 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
Summary
ALSA: pcm: Check for null pointer of pointer substream before dereferencing it
Details

In the Linux kernel, the following vulnerability has been resolved:

ALSA: pcm: Check for null pointer of pointer substream before dereferencing it

Pointer substream is being dereferenced on the assignment of pointer card before substream is being null checked with the macro PCMRUNTIMECHECK. Although PCMRUNTIMECHECK calls BUG_ON, it still is useful to perform the the pointer check before card is assigned.

References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
95b30a4312545f2dde9db12bf6a425f35d5a0d77
Fixed
b2421a196cb0911ea95aec1050a0b830464c8fa6
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
d4cfb30fce03093ad944e0b44bd8f40bdad5330e
Fixed
f2c68c52898f623fe84518da4606538d193b0cca
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
d4cfb30fce03093ad944e0b44bd8f40bdad5330e
Fixed
7784d22f81a29df2ec57ca90d54f93a35cbcd1a2
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
d4cfb30fce03093ad944e0b44bd8f40bdad5330e
Fixed
1f2e28857be1e5c7db39bbc221332215fc5467e3
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
d4cfb30fce03093ad944e0b44bd8f40bdad5330e
Fixed
b41ef7ad9238c22aa2e142f5ce4ce1a1a0d48123
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
d4cfb30fce03093ad944e0b44bd8f40bdad5330e
Fixed
011b559be832194f992f73d6c0d5485f5925a10b

Affected versions

v5.*

v5.10
v5.10-rc1
v5.10-rc2
v5.10-rc3
v5.10-rc4
v5.10-rc5
v5.10-rc6
v5.10-rc7
v5.10.1
v5.10.10
v5.10.100
v5.10.101
v5.10.102
v5.10.103
v5.10.104
v5.10.105
v5.10.106
v5.10.107
v5.10.108
v5.10.109
v5.10.11
v5.10.110
v5.10.111
v5.10.112
v5.10.113
v5.10.114
v5.10.115
v5.10.116
v5.10.117
v5.10.118
v5.10.119
v5.10.12
v5.10.120
v5.10.13
v5.10.14
v5.10.15
v5.10.16
v5.10.17
v5.10.18
v5.10.19
v5.10.2
v5.10.20
v5.10.21
v5.10.22
v5.10.23
v5.10.24
v5.10.25
v5.10.26
v5.10.27
v5.10.28
v5.10.29
v5.10.3
v5.10.30
v5.10.31
v5.10.32
v5.10.33
v5.10.34
v5.10.35
v5.10.36
v5.10.37
v5.10.38
v5.10.39
v5.10.4
v5.10.40
v5.10.41
v5.10.42
v5.10.43
v5.10.44
v5.10.45
v5.10.46
v5.10.47
v5.10.48
v5.10.49
v5.10.5
v5.10.50
v5.10.51
v5.10.52
v5.10.53
v5.10.54
v5.10.55
v5.10.56
v5.10.57
v5.10.58
v5.10.59
v5.10.6
v5.10.60
v5.10.61
v5.10.62
v5.10.63
v5.10.64
v5.10.65
v5.10.66
v5.10.67
v5.10.68
v5.10.69
v5.10.7
v5.10.70
v5.10.71
v5.10.72
v5.10.73
v5.10.74
v5.10.75
v5.10.76
v5.10.77
v5.10.78
v5.10.79
v5.10.8
v5.10.80
v5.10.81
v5.10.82
v5.10.83
v5.10.84
v5.10.85
v5.10.86
v5.10.87
v5.10.88
v5.10.89
v5.10.9
v5.10.90
v5.10.91
v5.10.92
v5.10.93
v5.10.94
v5.10.95
v5.10.96
v5.10.97
v5.10.98
v5.10.99
v5.11
v5.11-rc1
v5.11-rc2
v5.11-rc3
v5.11-rc4
v5.11-rc5
v5.11-rc6
v5.11-rc7
v5.12
v5.12-rc1
v5.12-rc1-dontuse
v5.12-rc2
v5.12-rc3
v5.12-rc4
v5.12-rc5
v5.12-rc6
v5.12-rc7
v5.12-rc8
v5.13
v5.13-rc1
v5.13-rc2
v5.13-rc3
v5.13-rc4
v5.13-rc5
v5.13-rc6
v5.13-rc7
v5.14
v5.14-rc1
v5.14-rc2
v5.14-rc3
v5.14-rc4
v5.14-rc5
v5.14-rc6
v5.14-rc7
v5.15
v5.15-rc1
v5.15-rc2
v5.15-rc3
v5.15-rc4
v5.15-rc5
v5.15-rc6
v5.15-rc7
v5.15.1
v5.15.10
v5.15.11
v5.15.12
v5.15.13
v5.15.14
v5.15.15
v5.15.16
v5.15.17
v5.15.18
v5.15.19
v5.15.2
v5.15.20
v5.15.21
v5.15.22
v5.15.23
v5.15.24
v5.15.25
v5.15.26
v5.15.27
v5.15.28
v5.15.29
v5.15.3
v5.15.30
v5.15.31
v5.15.32
v5.15.33
v5.15.34
v5.15.35
v5.15.36
v5.15.37
v5.15.38
v5.15.39
v5.15.4
v5.15.40
v5.15.41
v5.15.42
v5.15.43
v5.15.44
v5.15.45
v5.15.5
v5.15.6
v5.15.7
v5.15.8
v5.15.9
v5.16
v5.16-rc1
v5.16-rc2
v5.16-rc3
v5.16-rc4
v5.16-rc5
v5.16-rc6
v5.16-rc7
v5.16-rc8
v5.17
v5.17-rc1
v5.17-rc2
v5.17-rc3
v5.17-rc4
v5.17-rc5
v5.17-rc6
v5.17-rc7
v5.17-rc8
v5.17.1
v5.17.10
v5.17.11
v5.17.12
v5.17.13
v5.17.2
v5.17.3
v5.17.4
v5.17.5
v5.17.6
v5.17.7
v5.17.8
v5.17.9
v5.18
v5.18-rc1
v5.18-rc2
v5.18-rc3
v5.18-rc4
v5.18-rc5
v5.18-rc6
v5.18-rc7
v5.18.1
v5.18.2
v5.5
v5.5-rc2
v5.5-rc3
v5.5-rc4
v5.5-rc5
v5.5-rc6
v5.5-rc7
v5.6
v5.6-rc1
v5.6-rc2
v5.6-rc3
v5.6-rc4
v5.6-rc5
v5.6-rc6
v5.6-rc7
v5.7
v5.7-rc1
v5.7-rc2
v5.7-rc3
v5.7-rc4
v5.7-rc5
v5.7-rc6
v5.7-rc7
v5.8
v5.8-rc1
v5.8-rc2
v5.8-rc3
v5.8-rc4
v5.8-rc5
v5.8-rc6
v5.8-rc7
v5.9
v5.9-rc1
v5.9-rc2
v5.9-rc3
v5.9-rc4
v5.9-rc5
v5.9-rc6
v5.9-rc7
v5.9-rc8

Database specific

vanir_signatures

[
    {
        "signature_version": "v1",
        "deprecated": false,
        "digest": {
            "function_hash": "347503401922853025923354207760669259",
            "length": 364.0
        },
        "id": "CVE-2022-49498-04086de1",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7784d22f81a29df2ec57ca90d54f93a35cbcd1a2",
        "signature_type": "Function",
        "target": {
            "function": "snd_pcm_lib_free_pages",
            "file": "sound/core/pcm_memory.c"
        }
    },
    {
        "signature_version": "v1",
        "deprecated": false,
        "digest": {
            "function_hash": "347503401922853025923354207760669259",
            "length": 364.0
        },
        "id": "CVE-2022-49498-0a7f8544",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1f2e28857be1e5c7db39bbc221332215fc5467e3",
        "signature_type": "Function",
        "target": {
            "function": "snd_pcm_lib_free_pages",
            "file": "sound/core/pcm_memory.c"
        }
    },
    {
        "signature_version": "v1",
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "161553153454918952925414981542710054757",
                "193421450210077161737415718729802864711",
                "100356067064553777316477780635106313280",
                "100429090996580810756594261761240245374",
                "264481050580558591511003279812025969191",
                "313757111533338500186654526852494054928",
                "77804617326512805968311460070379572126",
                "243785454573970078561117868642366553740"
            ],
            "threshold": 0.9
        },
        "id": "CVE-2022-49498-2162d7ee",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b2421a196cb0911ea95aec1050a0b830464c8fa6",
        "signature_type": "Line",
        "target": {
            "file": "sound/core/pcm_memory.c"
        }
    },
    {
        "signature_version": "v1",
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "161553153454918952925414981542710054757",
                "193421450210077161737415718729802864711",
                "100356067064553777316477780635106313280",
                "100429090996580810756594261761240245374",
                "264481050580558591511003279812025969191",
                "313757111533338500186654526852494054928",
                "77804617326512805968311460070379572126",
                "243785454573970078561117868642366553740"
            ],
            "threshold": 0.9
        },
        "id": "CVE-2022-49498-495948ba",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f2c68c52898f623fe84518da4606538d193b0cca",
        "signature_type": "Line",
        "target": {
            "file": "sound/core/pcm_memory.c"
        }
    },
    {
        "signature_version": "v1",
        "deprecated": false,
        "digest": {
            "function_hash": "347503401922853025923354207760669259",
            "length": 364.0
        },
        "id": "CVE-2022-49498-52fc3bbe",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b2421a196cb0911ea95aec1050a0b830464c8fa6",
        "signature_type": "Function",
        "target": {
            "function": "snd_pcm_lib_free_pages",
            "file": "sound/core/pcm_memory.c"
        }
    },
    {
        "signature_version": "v1",
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "161553153454918952925414981542710054757",
                "193421450210077161737415718729802864711",
                "100356067064553777316477780635106313280",
                "100429090996580810756594261761240245374",
                "264481050580558591511003279812025969191",
                "313757111533338500186654526852494054928",
                "77804617326512805968311460070379572126",
                "243785454573970078561117868642366553740"
            ],
            "threshold": 0.9
        },
        "id": "CVE-2022-49498-626a7ffa",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1f2e28857be1e5c7db39bbc221332215fc5467e3",
        "signature_type": "Line",
        "target": {
            "file": "sound/core/pcm_memory.c"
        }
    },
    {
        "signature_version": "v1",
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "161553153454918952925414981542710054757",
                "193421450210077161737415718729802864711",
                "100356067064553777316477780635106313280",
                "100429090996580810756594261761240245374",
                "264481050580558591511003279812025969191",
                "313757111533338500186654526852494054928",
                "77804617326512805968311460070379572126",
                "243785454573970078561117868642366553740"
            ],
            "threshold": 0.9
        },
        "id": "CVE-2022-49498-6c5b49dc",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7784d22f81a29df2ec57ca90d54f93a35cbcd1a2",
        "signature_type": "Line",
        "target": {
            "file": "sound/core/pcm_memory.c"
        }
    },
    {
        "signature_version": "v1",
        "deprecated": false,
        "digest": {
            "function_hash": "347503401922853025923354207760669259",
            "length": 364.0
        },
        "id": "CVE-2022-49498-76cd75a1",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b41ef7ad9238c22aa2e142f5ce4ce1a1a0d48123",
        "signature_type": "Function",
        "target": {
            "function": "snd_pcm_lib_free_pages",
            "file": "sound/core/pcm_memory.c"
        }
    },
    {
        "signature_version": "v1",
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "161553153454918952925414981542710054757",
                "193421450210077161737415718729802864711",
                "100356067064553777316477780635106313280",
                "100429090996580810756594261761240245374",
                "264481050580558591511003279812025969191",
                "313757111533338500186654526852494054928",
                "77804617326512805968311460070379572126",
                "243785454573970078561117868642366553740"
            ],
            "threshold": 0.9
        },
        "id": "CVE-2022-49498-97014aa0",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@011b559be832194f992f73d6c0d5485f5925a10b",
        "signature_type": "Line",
        "target": {
            "file": "sound/core/pcm_memory.c"
        }
    },
    {
        "signature_version": "v1",
        "deprecated": false,
        "digest": {
            "function_hash": "347503401922853025923354207760669259",
            "length": 364.0
        },
        "id": "CVE-2022-49498-a33ebf24",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@011b559be832194f992f73d6c0d5485f5925a10b",
        "signature_type": "Function",
        "target": {
            "function": "snd_pcm_lib_free_pages",
            "file": "sound/core/pcm_memory.c"
        }
    },
    {
        "signature_version": "v1",
        "deprecated": false,
        "digest": {
            "function_hash": "347503401922853025923354207760669259",
            "length": 364.0
        },
        "id": "CVE-2022-49498-bf04445f",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f2c68c52898f623fe84518da4606538d193b0cca",
        "signature_type": "Function",
        "target": {
            "function": "snd_pcm_lib_free_pages",
            "file": "sound/core/pcm_memory.c"
        }
    },
    {
        "signature_version": "v1",
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "161553153454918952925414981542710054757",
                "193421450210077161737415718729802864711",
                "100356067064553777316477780635106313280",
                "100429090996580810756594261761240245374",
                "264481050580558591511003279812025969191",
                "313757111533338500186654526852494054928",
                "77804617326512805968311460070379572126",
                "243785454573970078561117868642366553740"
            ],
            "threshold": 0.9
        },
        "id": "CVE-2022-49498-e9b18223",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b41ef7ad9238c22aa2e142f5ce4ce1a1a0d48123",
        "signature_type": "Line",
        "target": {
            "file": "sound/core/pcm_memory.c"
        }
    }
]

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
5.6.0
Fixed
5.10.121
Type
ECOSYSTEM
Events
Introduced
5.11.0
Fixed
5.15.46
Type
ECOSYSTEM
Events
Introduced
5.16.0
Fixed
5.17.14
Type
ECOSYSTEM
Events
Introduced
5.18.0
Fixed
5.18.3