In the Linux kernel, the following vulnerability has been resolved:
ASoC: max9759: fix underflow in speakergaincontrol_put()
Check for negative values of "priv->gain" to prevent an out of bounds access. The concern is that these might come from the user via: -> sndctlelemwriteuser() -> sndctlelem_write() -> kctl->put()
[
{
"signature_type": "Line",
"deprecated": false,
"id": "CVE-2022-48717-017f1f40",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@baead410e5db49e962a67fffc17ac30e44b50b7c",
"digest": {
"line_hashes": [
"78040415561622537884580566560065436053",
"303085424668264811841169546403588577740",
"245547518624121539110311491983596714028",
"319643233971980956070683764151189072203"
],
"threshold": 0.9
},
"signature_version": "v1",
"target": {
"file": "sound/soc/codecs/max9759.c"
}
},
{
"signature_type": "Function",
"deprecated": false,
"id": "CVE-2022-48717-025dacb0",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@baead410e5db49e962a67fffc17ac30e44b50b7c",
"digest": {
"length": 441.0,
"function_hash": "184951347778604271639694981596448750490"
},
"signature_version": "v1",
"target": {
"function": "speaker_gain_control_put",
"file": "sound/soc/codecs/max9759.c"
}
},
{
"signature_type": "Function",
"deprecated": false,
"id": "CVE-2022-48717-18a1c7a3",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@71e60c170105d153e34d01766c1e4db26a4b24cc",
"digest": {
"length": 441.0,
"function_hash": "184951347778604271639694981596448750490"
},
"signature_version": "v1",
"target": {
"function": "speaker_gain_control_put",
"file": "sound/soc/codecs/max9759.c"
}
},
{
"signature_type": "Function",
"deprecated": false,
"id": "CVE-2022-48717-3672513d",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f114fd6165dfb52520755cc4d1c1dfbd447b88b6",
"digest": {
"length": 441.0,
"function_hash": "184951347778604271639694981596448750490"
},
"signature_version": "v1",
"target": {
"function": "speaker_gain_control_put",
"file": "sound/soc/codecs/max9759.c"
}
},
{
"signature_type": "Line",
"deprecated": false,
"id": "CVE-2022-48717-ba38603f",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@71e60c170105d153e34d01766c1e4db26a4b24cc",
"digest": {
"line_hashes": [
"78040415561622537884580566560065436053",
"303085424668264811841169546403588577740",
"245547518624121539110311491983596714028",
"319643233971980956070683764151189072203"
],
"threshold": 0.9
},
"signature_version": "v1",
"target": {
"file": "sound/soc/codecs/max9759.c"
}
},
{
"signature_type": "Line",
"deprecated": false,
"id": "CVE-2022-48717-fa3b8078",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f114fd6165dfb52520755cc4d1c1dfbd447b88b6",
"digest": {
"line_hashes": [
"78040415561622537884580566560065436053",
"303085424668264811841169546403588577740",
"245547518624121539110311491983596714028",
"319643233971980956070683764151189072203"
],
"threshold": 0.9
},
"signature_version": "v1",
"target": {
"file": "sound/soc/codecs/max9759.c"
}
}
]