Skip to content
CVE PROGRAM SOURCE RECORD5.5 Medium

CVE-2022-49498

ALSA: pcm: Check for null pointer of pointer substream before dereferencing it

Description

In the Linux kernel, the following vulnerability has been resolved: ALSA: pcm: Check for null pointer of pointer substream before dereferencing it Pointer substream is being dereferenced on the assignment of pointer card before substream is being null checked with the macro PCM_RUNTIME_CHECK. Although PCM_RUNTIME_CHECK calls BUG_ON, it still is useful to perform the the pointer check before card is assigned.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 95b30a4312545f2dde9db12bf6a425f35d5a0d77 to < b2421a196cb0911ea95aec1050a0b830464c8fa6affected
  • d4cfb30fce03093ad944e0b44bd8f40bdad5330e to < f2c68c52898f623fe84518da4606538d193b0ccaaffected
  • d4cfb30fce03093ad944e0b44bd8f40bdad5330e to < 7784d22f81a29df2ec57ca90d54f93a35cbcd1a2affected
  • d4cfb30fce03093ad944e0b44bd8f40bdad5330e to < 1f2e28857be1e5c7db39bbc221332215fc5467e3affected
  • d4cfb30fce03093ad944e0b44bd8f40bdad5330e to < b41ef7ad9238c22aa2e142f5ce4ce1a1a0d48123affected
  • d4cfb30fce03093ad944e0b44bd8f40bdad5330e to < 011b559be832194f992f73d6c0d5485f5925a10baffected

Linux Linux

Default version status: affected

  • 5.6affected
  • 0 to < 5.6unaffected
  • 5.10.121 to ≤ 5.10.*unaffected
  • 5.15.46 to ≤ 5.15.*unaffected
  • 5.17.14 to ≤ 5.17.*unaffected
  • 5.18.3 to ≤ 5.18.*unaffected
  • 5.19 to ≤ *unaffected

References