CVE-2022-49005

ASoC: ops: Fix bounds check for _sx controls

State: Published
Severity: Not scored
Published: Oct 21, 2024
Updated: May 23, 2026
Reserved: Aug 22, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

ASoC: ops: Fix bounds check for _sx controls

For _sx controls the semantics of the max field is not the usual one, max is the number of steps rather than the maximum value. This means that our check in snd_soc_put_volsw_sx() needs to just check against the maximum value.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	9e5c40b5706d8aae2cf70bd7e01f0b4575a642d0 to before e46adadf19248d59af3aa6bc52e09115bf479bf7Affected 4977491e4b3aad8567f57e2a9992d251410c1db3 to before 4a95a49f26308782b4056401989ecd7768fda8faAffected 9a12fcbf3c622f9bf6b110a873d62b0cba93972e to before 46bab25cc0230df60d1c02b651cc5640a14b08dfAffected c33402b056de61104b6146dedbe138ca8d7ec62b to before 73dce3c1d48c4662bdf3ccbde1492c2cb4bfd8ceAffected 038f8b7caa74d29e020949a43ca368c93f6b29b9 to before b50c9641897274c3faef5f95ac852f54b94be2e8Affected e8e07c5e25a29e2a6f119fd947f55d7a55eb8a13 to before 98b15c706644bebc19d2e77ccc360cc51444f6d0Affected 4f1e50d6a9cf9c1b8c859d449b5031cacfa8404e to before 325d94d16e3131b54bdf07356e4cd855e0d853fcAffected 4f1e50d6a9cf9c1b8c859d449b5031cacfa8404e to before 698813ba8c580efb356ace8dbf55f61dac6063a8Affected ef6cd9eeb38062a145802b7b56be7ae1090e165eAffected 4.9.300 to before 4.9.335Affected 4.14.265 to before 4.14.301Affected 4.19.228 to before 4.19.268Affected 5.4.178 to before 5.4.226Affected 5.10.99 to before 5.10.158Affected 5.15.22 to before 5.15.82Affected 5.16.8 to before 5.17Affected
LinuxLinux	5.17Affected before 5.17Not affected 4.9.335 through 4.9.Not affected 4.14.301 through 4.14.Not affected 4.19.268 through 4.19.Not affected 5.4.226 through 5.4.Not affected 5.10.158 through 5.10.Not affected 5.15.82 through 5.15.Not affected 6.0.12 through 6.0.*Not affected 6.1 and laterNot affected

Product

Versions

LinuxLinux

9e5c40b5706d8aae2cf70bd7e01f0b4575a642d0 to before e46adadf19248d59af3aa6bc52e09115bf479bf7Affected
4977491e4b3aad8567f57e2a9992d251410c1db3 to before 4a95a49f26308782b4056401989ecd7768fda8faAffected
9a12fcbf3c622f9bf6b110a873d62b0cba93972e to before 46bab25cc0230df60d1c02b651cc5640a14b08dfAffected
c33402b056de61104b6146dedbe138ca8d7ec62b to before 73dce3c1d48c4662bdf3ccbde1492c2cb4bfd8ceAffected
038f8b7caa74d29e020949a43ca368c93f6b29b9 to before b50c9641897274c3faef5f95ac852f54b94be2e8Affected
e8e07c5e25a29e2a6f119fd947f55d7a55eb8a13 to before 98b15c706644bebc19d2e77ccc360cc51444f6d0Affected
4f1e50d6a9cf9c1b8c859d449b5031cacfa8404e to before 325d94d16e3131b54bdf07356e4cd855e0d853fcAffected
4f1e50d6a9cf9c1b8c859d449b5031cacfa8404e to before 698813ba8c580efb356ace8dbf55f61dac6063a8Affected
ef6cd9eeb38062a145802b7b56be7ae1090e165eAffected
4.9.300 to before 4.9.335Affected
4.14.265 to before 4.14.301Affected
4.19.228 to before 4.19.268Affected
5.4.178 to before 5.4.226Affected
5.10.99 to before 5.10.158Affected
5.15.22 to before 5.15.82Affected
5.16.8 to before 5.17Affected

LinuxLinux

5.17Affected
before 5.17Not affected
4.9.335 through 4.9.*Not affected
4.14.301 through 4.14.*Not affected
4.19.268 through 4.19.*Not affected
5.4.226 through 5.4.*Not affected
5.10.158 through 5.10.*Not affected
5.15.82 through 5.15.*Not affected
6.0.12 through 6.0.*Not affected
6.1 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.