CVE-2022-48717

ASoC: max9759: fix underflow in speaker_gain_control_put()

State: Published
Severity: 7.1 High
Published: Jun 20, 2024
Updated: Aug 5, 2026
Reserved: Jun 20, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

ASoC: max9759: fix underflow in speaker_gain_control_put()

Check for negative values of "priv->gain" to prevent an out of bounds access. The concern is that these might come from the user via: -> snd_ctl_elem_write_user() -> snd_ctl_elem_write() -> kctl->put()

Scores

CVSS	Score	Vector	Source
3.1	7.1 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	fa8d915172b8c10ec0734c4021e99e9705023b07 to before a0f49d12547d45ea8b0f356a96632dd503941c1eAffected fa8d915172b8c10ec0734c4021e99e9705023b07 to before 71e60c170105d153e34d01766c1e4db26a4b24ccAffected fa8d915172b8c10ec0734c4021e99e9705023b07 to before 5a45448ac95b715173edb1cd090ff24b6586d921Affected fa8d915172b8c10ec0734c4021e99e9705023b07 to before baead410e5db49e962a67fffc17ac30e44b50b7cAffected fa8d915172b8c10ec0734c4021e99e9705023b07 to before f114fd6165dfb52520755cc4d1c1dfbd447b88b6Affected fa8d915172b8c10ec0734c4021e99e9705023b07 to before 4c907bcd9dcd233da6707059d777ab389dcbd964Affected
LinuxLinux	4.17Affected before 4.17Not affected 4.19.228 through 4.19.Not affected 5.4.178 through 5.4.Not affected 5.10.99 through 5.10.Not affected 5.15.22 through 5.15.Not affected 5.16.8 through 5.16.*Not affected 5.17 and laterNot affected

Product

Versions

LinuxLinux

fa8d915172b8c10ec0734c4021e99e9705023b07 to before a0f49d12547d45ea8b0f356a96632dd503941c1eAffected
fa8d915172b8c10ec0734c4021e99e9705023b07 to before 71e60c170105d153e34d01766c1e4db26a4b24ccAffected
fa8d915172b8c10ec0734c4021e99e9705023b07 to before 5a45448ac95b715173edb1cd090ff24b6586d921Affected
fa8d915172b8c10ec0734c4021e99e9705023b07 to before baead410e5db49e962a67fffc17ac30e44b50b7cAffected
fa8d915172b8c10ec0734c4021e99e9705023b07 to before f114fd6165dfb52520755cc4d1c1dfbd447b88b6Affected
fa8d915172b8c10ec0734c4021e99e9705023b07 to before 4c907bcd9dcd233da6707059d777ab389dcbd964Affected

LinuxLinux

4.17Affected
before 4.17Not affected
4.19.228 through 4.19.*Not affected
5.4.178 through 5.4.*Not affected
5.10.99 through 5.10.*Not affected
5.15.22 through 5.15.*Not affected
5.16.8 through 5.16.*Not affected
5.17 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.