In the Linux kernel, the following vulnerability has been resolved:
ASoC: ops: Check bounds for second channel in sndsocputvolswsx()
The bounds checks in sndsocputvolswsx() are only being applied to the first channel, meaning it is possible to write out of bounds values to the second channel in stereo controls. Add appropriate checks.
{ "vanir_signatures": [ { "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9796d07c753164b7e6b0d7ef23fb4482840a9ef8", "target": { "file": "sound/soc/soc-ops.c" }, "digest": { "threshold": 0.9, "line_hashes": [ "202495244139168679969234664568658092841", "197995328910361685797219199243254181975", "43959944421950352416675468135608895304", "19350473786309597442211285024915042375" ] }, "id": "CVE-2022-48951-0b369686", "deprecated": false, "signature_type": "Line", "signature_version": "v1" }, { "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9796d07c753164b7e6b0d7ef23fb4482840a9ef8", "target": { "file": "sound/soc/soc-ops.c", "function": "snd_soc_put_volsw_sx" }, "digest": { "length": 957.0, "function_hash": "137562092881052335889582371646541366701" }, "id": "CVE-2022-48951-21b39d98", "deprecated": false, "signature_type": "Function", "signature_version": "v1" }, { "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@50b5f6d4d9d2d69a7498c44fd8b26e13d73d3d98", "target": { "file": "sound/soc/soc-ops.c", "function": "snd_soc_put_volsw_sx" }, "digest": { "length": 957.0, "function_hash": "137562092881052335889582371646541366701" }, "id": "CVE-2022-48951-2d030b21", "deprecated": false, "signature_type": "Function", "signature_version": "v1" }, { "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1798b62d642e7b3d4ea3403914c3caf4e438465d", "target": { "file": "sound/soc/soc-ops.c" }, "digest": { "threshold": 0.9, "line_hashes": [ "244720810189185292025317584002182797893", "24459435376930504582052628125799977992", "43959944421950352416675468135608895304", "19350473786309597442211285024915042375" ] }, "id": "CVE-2022-48951-30c705ee", "deprecated": false, "signature_type": "Line", "signature_version": "v1" }, { "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@50b5f6d4d9d2d69a7498c44fd8b26e13d73d3d98", "target": { "file": "sound/soc/soc-ops.c" }, "digest": { "threshold": 0.9, "line_hashes": [ "202495244139168679969234664568658092841", "197995328910361685797219199243254181975", "43959944421950352416675468135608895304", "19350473786309597442211285024915042375" ] }, "id": "CVE-2022-48951-41e55478", "deprecated": false, "signature_type": "Line", "signature_version": "v1" }, { "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@56288987843c3cb343e81e5fa51549cbaf541bd0", "target": { "file": "sound/soc/soc-ops.c", "function": "snd_soc_put_volsw_sx" }, "digest": { "length": 947.0, "function_hash": "196668438173733309979242198787572823886" }, "id": "CVE-2022-48951-7bf6cd72", "deprecated": false, "signature_type": "Function", "signature_version": "v1" }, { "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@cf611d786796ec33da09d8c83d7d7f4e557b27de", "target": { "file": "sound/soc/soc-ops.c", "function": "snd_soc_put_volsw_sx" }, "digest": { "length": 1035.0, "function_hash": "8013454870908981048224254813951840323" }, "id": "CVE-2022-48951-814718b1", "deprecated": false, "signature_type": "Function", "signature_version": "v1" }, { "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@56288987843c3cb343e81e5fa51549cbaf541bd0", "target": { "file": "sound/soc/soc-ops.c" }, "digest": { "threshold": 0.9, "line_hashes": [ "202495244139168679969234664568658092841", "197995328910361685797219199243254181975", "43959944421950352416675468135608895304", "19350473786309597442211285024915042375" ] }, "id": "CVE-2022-48951-8f884d6f", "deprecated": false, "signature_type": "Line", "signature_version": "v1" }, { "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@97eea946b93961fffd29448dcda7398d0d51c4b2", "target": { "file": "sound/soc/soc-ops.c" }, "digest": { "threshold": 0.9, "line_hashes": [ "244720810189185292025317584002182797893", "24459435376930504582052628125799977992", "43959944421950352416675468135608895304", "19350473786309597442211285024915042375" ] }, "id": "CVE-2022-48951-a5901278", "deprecated": false, "signature_type": "Line", "signature_version": "v1" }, { "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@cf1c225f1927891ae388562b78ced7840c3723b9", "target": { "file": "sound/soc/soc-ops.c", "function": "snd_soc_put_volsw_sx" }, "digest": { "length": 947.0, "function_hash": "196668438173733309979242198787572823886" }, "id": "CVE-2022-48951-b40380a6", "deprecated": false, "signature_type": "Function", "signature_version": "v1" }, { "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1798b62d642e7b3d4ea3403914c3caf4e438465d", "target": { "file": "sound/soc/soc-ops.c", "function": "snd_soc_put_volsw_sx" }, "digest": { "length": 1070.0, "function_hash": "130836819930387974971466376191598142115" }, "id": "CVE-2022-48951-b5a6efb1", "deprecated": false, "signature_type": "Function", "signature_version": "v1" }, { "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@cf611d786796ec33da09d8c83d7d7f4e557b27de", "target": { "file": "sound/soc/soc-ops.c" }, "digest": { "threshold": 0.9, "line_hashes": [ "244720810189185292025317584002182797893", "24459435376930504582052628125799977992", "43959944421950352416675468135608895304", "19350473786309597442211285024915042375" ] }, "id": "CVE-2022-48951-b722dc55", "deprecated": false, "signature_type": "Line", "signature_version": "v1" }, { "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@18a168d85eadcfd45f015b5ecd2a97801b959e43", "target": { "file": "sound/soc/soc-ops.c", "function": "snd_soc_put_volsw_sx" }, "digest": { "length": 957.0, "function_hash": "137562092881052335889582371646541366701" }, "id": "CVE-2022-48951-c61a79ee", "deprecated": false, "signature_type": "Function", "signature_version": "v1" }, { "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@cf1c225f1927891ae388562b78ced7840c3723b9", "target": { "file": "sound/soc/soc-ops.c" }, "digest": { "threshold": 0.9, "line_hashes": [ "202495244139168679969234664568658092841", "197995328910361685797219199243254181975", "43959944421950352416675468135608895304", "19350473786309597442211285024915042375" ] }, "id": "CVE-2022-48951-cd10698f", "deprecated": false, "signature_type": "Line", "signature_version": "v1" }, { "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@97eea946b93961fffd29448dcda7398d0d51c4b2", "target": { "file": "sound/soc/soc-ops.c", "function": "snd_soc_put_volsw_sx" }, "digest": { "length": 1070.0, "function_hash": "130836819930387974971466376191598142115" }, "id": "CVE-2022-48951-f51494c5", "deprecated": false, "signature_type": "Function", "signature_version": "v1" }, { "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@18a168d85eadcfd45f015b5ecd2a97801b959e43", "target": { "file": "sound/soc/soc-ops.c" }, "digest": { "threshold": 0.9, "line_hashes": [ "202495244139168679969234664568658092841", "197995328910361685797219199243254181975", "43959944421950352416675468135608895304", "19350473786309597442211285024915042375" ] }, "id": "CVE-2022-48951-f81422af", "deprecated": false, "signature_type": "Line", "signature_version": "v1" } ] }