Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2022-48716

ASoC: codecs: wcd938x: fix incorrect used of portid

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: wcd938x: fix incorrect used of portid Mixer controls have the channel id in mixer->reg, which is not same as port id. port id should be derived from chan_info array. So fix this. Without this, its possible that we could corrupt struct wcd938x_sdw_priv by accessing port_map array out of range with channel id instead of port id.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • e8ba1e05bdc016700c85fad559a812c2e795442f to < aa7152f9f117b3e66b3c0d4158ca4c6d46ab229faffected
  • e8ba1e05bdc016700c85fad559a812c2e795442f to < 9167f2712dc8c24964840a4d1e2ebf130e846b95affected
  • e8ba1e05bdc016700c85fad559a812c2e795442f to < c5c1546a654f613e291a7c5d6f3660fc1eb6d0c7affected

Linux Linux

Default version status: affected

  • 5.14affected
  • 0 to < 5.14unaffected
  • 5.15.22 to ≤ 5.15.*unaffected
  • 5.16.8 to ≤ 5.16.*unaffected
  • 5.17 to ≤ *unaffected

References