Skip to content
CVE PROGRAM SOURCE RECORD7.1 High

CVE-2022-48739

ASoC: hdmi-codec: Fix OOB memory accesses

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: ASoC: hdmi-codec: Fix OOB memory accesses Correct size of iec_status array by changing it to the size of status array of the struct snd_aes_iec958. This fixes out-of-bounds slab read accesses made by memcpy() of the hdmi-codec driver. This problem is reported by KASAN.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 7a8e1d44211e16eb394b7b9e0b236ee1503a3ad3 to < 10007bd96b6c4c3cfaea9e76c311b06a07a5e260affected
  • 7a8e1d44211e16eb394b7b9e0b236ee1503a3ad3 to < 1552e66be325a21d7eff49f46013fb402165a0acaffected
  • 7a8e1d44211e16eb394b7b9e0b236ee1503a3ad3 to < 06feec6005c9d9500cd286ec440aabf8b2ddd94daffected

Linux Linux

Default version status: affected

  • 5.14affected
  • 0 to < 5.14unaffected
  • 5.15.22 to ≤ 5.15.*unaffected
  • 5.16.8 to ≤ 5.16.*unaffected
  • 5.17 to ≤ *unaffected

References