Riskcovery

CVE-2022-48739

ASoC: hdmi-codec: Fix OOB memory accesses

State
Published
Severity
7.1 High
Published
Jun 20, 2024
Updated
Aug 5, 2026
Reserved
Jun 20, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

ASoC: hdmi-codec: Fix OOB memory accesses

Correct size of iec_status array by changing it to the size of status array of the struct snd_aes_iec958. This fixes out-of-bounds slab read accesses made by memcpy() of the hdmi-codec driver. This problem is reported by KASAN.

Scores

CVSSScoreVectorSource
3.17.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:HLinux

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 7a8e1d44211e16eb394b7b9e0b236ee1503a3ad3 to before 10007bd96b6c4c3cfaea9e76c311b06a07a5e260Affected
  • 7a8e1d44211e16eb394b7b9e0b236ee1503a3ad3 to before 1552e66be325a21d7eff49f46013fb402165a0acAffected
  • 7a8e1d44211e16eb394b7b9e0b236ee1503a3ad3 to before 06feec6005c9d9500cd286ec440aabf8b2ddd94dAffected
LinuxLinux
  • 5.14Affected
  • before 5.14Not affected
  • 5.15.22 through 5.15.*Not affected
  • 5.16.8 through 5.16.*Not affected
  • 5.17 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.