In the Linux kernel, the following vulnerability has been resolved:
ASoC: ops: Check bounds for second channel in sndsocputvolswsx()
The bounds checks in sndsocputvolswsx() are only being applied to the first channel, meaning it is possible to write out of bounds values to the second channel in stereo controls. Add appropriate checks.
{
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/48xxx/CVE-2022-48951.json",
"cna_assigner": "Linux"
}[
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"202495244139168679969234664568658092841",
"197995328910361685797219199243254181975",
"43959944421950352416675468135608895304",
"19350473786309597442211285024915042375"
]
},
"id": "CVE-2022-48951-0b369686",
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9796d07c753164b7e6b0d7ef23fb4482840a9ef8",
"target": {
"file": "sound/soc/soc-ops.c"
},
"signature_version": "v1",
"deprecated": false
},
{
"digest": {
"length": 957.0,
"function_hash": "137562092881052335889582371646541366701"
},
"id": "CVE-2022-48951-21b39d98",
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9796d07c753164b7e6b0d7ef23fb4482840a9ef8",
"target": {
"function": "snd_soc_put_volsw_sx",
"file": "sound/soc/soc-ops.c"
},
"signature_version": "v1",
"deprecated": false
},
{
"digest": {
"length": 957.0,
"function_hash": "137562092881052335889582371646541366701"
},
"id": "CVE-2022-48951-2d030b21",
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@50b5f6d4d9d2d69a7498c44fd8b26e13d73d3d98",
"target": {
"function": "snd_soc_put_volsw_sx",
"file": "sound/soc/soc-ops.c"
},
"signature_version": "v1",
"deprecated": false
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"244720810189185292025317584002182797893",
"24459435376930504582052628125799977992",
"43959944421950352416675468135608895304",
"19350473786309597442211285024915042375"
]
},
"id": "CVE-2022-48951-30c705ee",
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1798b62d642e7b3d4ea3403914c3caf4e438465d",
"target": {
"file": "sound/soc/soc-ops.c"
},
"signature_version": "v1",
"deprecated": false
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"202495244139168679969234664568658092841",
"197995328910361685797219199243254181975",
"43959944421950352416675468135608895304",
"19350473786309597442211285024915042375"
]
},
"id": "CVE-2022-48951-41e55478",
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@50b5f6d4d9d2d69a7498c44fd8b26e13d73d3d98",
"target": {
"file": "sound/soc/soc-ops.c"
},
"signature_version": "v1",
"deprecated": false
},
{
"digest": {
"length": 947.0,
"function_hash": "196668438173733309979242198787572823886"
},
"id": "CVE-2022-48951-7bf6cd72",
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@56288987843c3cb343e81e5fa51549cbaf541bd0",
"target": {
"function": "snd_soc_put_volsw_sx",
"file": "sound/soc/soc-ops.c"
},
"signature_version": "v1",
"deprecated": false
},
{
"digest": {
"length": 1035.0,
"function_hash": "8013454870908981048224254813951840323"
},
"id": "CVE-2022-48951-814718b1",
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@cf611d786796ec33da09d8c83d7d7f4e557b27de",
"target": {
"function": "snd_soc_put_volsw_sx",
"file": "sound/soc/soc-ops.c"
},
"signature_version": "v1",
"deprecated": false
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"202495244139168679969234664568658092841",
"197995328910361685797219199243254181975",
"43959944421950352416675468135608895304",
"19350473786309597442211285024915042375"
]
},
"id": "CVE-2022-48951-8f884d6f",
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@56288987843c3cb343e81e5fa51549cbaf541bd0",
"target": {
"file": "sound/soc/soc-ops.c"
},
"signature_version": "v1",
"deprecated": false
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"244720810189185292025317584002182797893",
"24459435376930504582052628125799977992",
"43959944421950352416675468135608895304",
"19350473786309597442211285024915042375"
]
},
"id": "CVE-2022-48951-a5901278",
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@97eea946b93961fffd29448dcda7398d0d51c4b2",
"target": {
"file": "sound/soc/soc-ops.c"
},
"signature_version": "v1",
"deprecated": false
},
{
"digest": {
"length": 947.0,
"function_hash": "196668438173733309979242198787572823886"
},
"id": "CVE-2022-48951-b40380a6",
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@cf1c225f1927891ae388562b78ced7840c3723b9",
"target": {
"function": "snd_soc_put_volsw_sx",
"file": "sound/soc/soc-ops.c"
},
"signature_version": "v1",
"deprecated": false
},
{
"digest": {
"length": 1070.0,
"function_hash": "130836819930387974971466376191598142115"
},
"id": "CVE-2022-48951-b5a6efb1",
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1798b62d642e7b3d4ea3403914c3caf4e438465d",
"target": {
"function": "snd_soc_put_volsw_sx",
"file": "sound/soc/soc-ops.c"
},
"signature_version": "v1",
"deprecated": false
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"244720810189185292025317584002182797893",
"24459435376930504582052628125799977992",
"43959944421950352416675468135608895304",
"19350473786309597442211285024915042375"
]
},
"id": "CVE-2022-48951-b722dc55",
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@cf611d786796ec33da09d8c83d7d7f4e557b27de",
"target": {
"file": "sound/soc/soc-ops.c"
},
"signature_version": "v1",
"deprecated": false
},
{
"digest": {
"length": 957.0,
"function_hash": "137562092881052335889582371646541366701"
},
"id": "CVE-2022-48951-c61a79ee",
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@18a168d85eadcfd45f015b5ecd2a97801b959e43",
"target": {
"function": "snd_soc_put_volsw_sx",
"file": "sound/soc/soc-ops.c"
},
"signature_version": "v1",
"deprecated": false
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"202495244139168679969234664568658092841",
"197995328910361685797219199243254181975",
"43959944421950352416675468135608895304",
"19350473786309597442211285024915042375"
]
},
"id": "CVE-2022-48951-cd10698f",
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@cf1c225f1927891ae388562b78ced7840c3723b9",
"target": {
"file": "sound/soc/soc-ops.c"
},
"signature_version": "v1",
"deprecated": false
},
{
"digest": {
"length": 1070.0,
"function_hash": "130836819930387974971466376191598142115"
},
"id": "CVE-2022-48951-f51494c5",
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@97eea946b93961fffd29448dcda7398d0d51c4b2",
"target": {
"function": "snd_soc_put_volsw_sx",
"file": "sound/soc/soc-ops.c"
},
"signature_version": "v1",
"deprecated": false
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"202495244139168679969234664568658092841",
"197995328910361685797219199243254181975",
"43959944421950352416675468135608895304",
"19350473786309597442211285024915042375"
]
},
"id": "CVE-2022-48951-f81422af",
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@18a168d85eadcfd45f015b5ecd2a97801b959e43",
"target": {
"file": "sound/soc/soc-ops.c"
},
"signature_version": "v1",
"deprecated": false
}
]
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-48951.json"