CVE-2022-48917

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is related to the ASoC component in the Linux kernel, specifically with the function snd soc put volsw(). The problem arises because the limits of the control can be signed integers, and the $min value can be non-zero and less than zero. To correctly validate $val/$val2 against platform max, the $min offset needs to be added to val first. This issue can lead to a denial of service.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.