CVE-2022-48738

ASoC: ops: Reject out of bounds values in snd_soc_put_volsw()

State: Published
Severity: Not scored
Published: Jun 20, 2024
Updated: May 11, 2026
Reserved: Jun 20, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

ASoC: ops: Reject out of bounds values in snd_soc_put_volsw()

We don't currently validate that the values being set are within the range we advertised to userspace as being valid, do so and reject any values that are out of range.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	f227b88f0fce5f9b82aa934f8829a741c2e06d82 to before 40f598698129b5ceaf31012f9501b775c7b6e57dAffected f227b88f0fce5f9b82aa934f8829a741c2e06d82 to before 586ef863c94354a7e00e5ae5ef01443d1dc99bc7Affected f227b88f0fce5f9b82aa934f8829a741c2e06d82 to before 65a61b1f56f5386486757930069fbdce94af08bfAffected f227b88f0fce5f9b82aa934f8829a741c2e06d82 to before 68fd718724284788fc5f379e0b7cac541429ece7Affected f227b88f0fce5f9b82aa934f8829a741c2e06d82 to before a9394f21fba027147bf275b083c77955864c366aAffected f227b88f0fce5f9b82aa934f8829a741c2e06d82 to before 9e8895f1b3d4433f6d78aa6578e9db61ca6e6830Affected f227b88f0fce5f9b82aa934f8829a741c2e06d82 to before bb72d2dda85564c66d909108ea6903937a41679dAffected f227b88f0fce5f9b82aa934f8829a741c2e06d82 to before 817f7c9335ec01e0f5e8caffc4f1dcd5e458a4c0Affected
LinuxLinux	3.15Affected before 3.15Not affected 4.9.300 through 4.9.Not affected 4.14.265 through 4.14.Not affected 4.19.228 through 4.19.Not affected 5.4.178 through 5.4.Not affected 5.10.99 through 5.10.Not affected 5.15.22 through 5.15.Not affected 5.16.8 through 5.16.*Not affected 5.17 and laterNot affected

Product

Versions

LinuxLinux

f227b88f0fce5f9b82aa934f8829a741c2e06d82 to before 40f598698129b5ceaf31012f9501b775c7b6e57dAffected
f227b88f0fce5f9b82aa934f8829a741c2e06d82 to before 586ef863c94354a7e00e5ae5ef01443d1dc99bc7Affected
f227b88f0fce5f9b82aa934f8829a741c2e06d82 to before 65a61b1f56f5386486757930069fbdce94af08bfAffected
f227b88f0fce5f9b82aa934f8829a741c2e06d82 to before 68fd718724284788fc5f379e0b7cac541429ece7Affected
f227b88f0fce5f9b82aa934f8829a741c2e06d82 to before a9394f21fba027147bf275b083c77955864c366aAffected
f227b88f0fce5f9b82aa934f8829a741c2e06d82 to before 9e8895f1b3d4433f6d78aa6578e9db61ca6e6830Affected
f227b88f0fce5f9b82aa934f8829a741c2e06d82 to before bb72d2dda85564c66d909108ea6903937a41679dAffected
f227b88f0fce5f9b82aa934f8829a741c2e06d82 to before 817f7c9335ec01e0f5e8caffc4f1dcd5e458a4c0Affected

LinuxLinux

3.15Affected
before 3.15Not affected
4.9.300 through 4.9.*Not affected
4.14.265 through 4.14.*Not affected
4.19.228 through 4.19.*Not affected
5.4.178 through 5.4.*Not affected
5.10.99 through 5.10.*Not affected
5.15.22 through 5.15.*Not affected
5.16.8 through 5.16.*Not affected
5.17 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.