CVE-2022-48917

Published Aug 22, 2024

Last updated 2 months ago

CVSS medium 5.5

Overview

Description: In the Linux kernel, the following vulnerability has been resolved: ASoC: ops: Shift tested values in snd_soc_put_volsw() by +min While the $val/$val2 values passed in from userspace are always >= 0 integers, the limits of the control can be signed integers and the $min can be non-zero and less than zero. To correctly validate $val/$val2 against platform_max, add the $min offset to val first.
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
NVD status: Analyzed

Risk scores

CVSS 3.1

Type: Primary
Base score: 5.5
Impact score: 3.6
Exploitability score: 1.8
Vector string: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Severity: MEDIUM

Weaknesses

nvd@nist.gov: NVD-CWE-noinfo

Hype score: Not currently trending

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "7078F5FD-8C44-4848-8434-373F11E2437F",
            "versionEndExcluding": "4.9.305",
            "versionStartIncluding": "4.9.300"
          },
          {
            "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "EE350A5A-C35A-4391-8BF5-BD86BA58F692",
            "versionEndExcluding": "4.14.270",
            "versionStartIncluding": "4.14.265"
          },
          {
            "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "CAD48EEC-226F-4CEE-B62A-4C2E080C07DD",
            "versionEndExcluding": "4.19.233",
            "versionStartIncluding": "4.19.228"
          },
          {
            "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "BFA7B940-F1DA-4FFA-B8CF-2207C6B13588",
            "versionEndExcluding": "5.4.183",
            "versionStartIncluding": "5.4.178"
          },
          {
            "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "EB68B618-D9A9-4D08-825F-95066EBB07B8",
            "versionEndExcluding": "5.10.104",
            "versionStartIncluding": "5.10.99"
          },
          {
            "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "9274DE9A-1466-4660-ABE0-FCE84DFE75E3",
            "versionEndExcluding": "5.15.27",
            "versionStartIncluding": "5.15.22"
          },
          {
            "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "EDE53E28-A078-4F10-B3B9-EE8482DCFEC7",
            "versionEndExcluding": "5.16.13",
            "versionStartIncluding": "5.16.8"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

Overview

Risk scores

CVSS 3.1

Weaknesses

Social media

Configurations

References