Skip to content
CVE PROGRAM SOURCE RECORD7.1 High

CVE-2022-48717

ASoC: max9759: fix underflow in speaker_gain_control_put()

Description

In the Linux kernel, the following vulnerability has been resolved: ASoC: max9759: fix underflow in speaker_gain_control_put() Check for negative values of "priv->gain" to prevent an out of bounds access. The concern is that these might come from the user via: -> snd_ctl_elem_write_user() -> snd_ctl_elem_write() -> kctl->put()

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • fa8d915172b8c10ec0734c4021e99e9705023b07 to < a0f49d12547d45ea8b0f356a96632dd503941c1eaffected
  • fa8d915172b8c10ec0734c4021e99e9705023b07 to < 71e60c170105d153e34d01766c1e4db26a4b24ccaffected
  • fa8d915172b8c10ec0734c4021e99e9705023b07 to < 5a45448ac95b715173edb1cd090ff24b6586d921affected
  • fa8d915172b8c10ec0734c4021e99e9705023b07 to < baead410e5db49e962a67fffc17ac30e44b50b7caffected
  • fa8d915172b8c10ec0734c4021e99e9705023b07 to < f114fd6165dfb52520755cc4d1c1dfbd447b88b6affected
  • fa8d915172b8c10ec0734c4021e99e9705023b07 to < 4c907bcd9dcd233da6707059d777ab389dcbd964affected

Linux Linux

Default version status: affected

  • 4.17affected
  • 0 to < 4.17unaffected
  • 4.19.228 to ≤ 4.19.*unaffected
  • 5.4.178 to ≤ 5.4.*unaffected
  • 5.10.99 to ≤ 5.10.*unaffected
  • 5.15.22 to ≤ 5.15.*unaffected
  • 5.16.8 to ≤ 5.16.*unaffected
  • 5.17 to ≤ *unaffected

References