PT-2024-11788

CVE-2022-48736

·

Published

2024-06-20

·

Updated

2024-08-16

Description by

CVSS 3.1
7.8
High
MetricsAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description The issue concerns the Linux kernel, where a vulnerability has been resolved related to the ASoC: ops. Specifically, the snd soc put xr sx() function did not validate that the values being set were within the range advertised to userspace as being valid. This lack of validation could lead to out-of-bounds values. The estimated number of potentially affected devices worldwide is not available. There is no information about real-world incidents where this issue was exploited.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Vendors
Affected products
Related identifiers
OESA-2024-1835
OPENSUSE-SU-2024_2362-1
OPENSUSE-SU-2024_2372-1
OPENSUSE-SU-2024_2394-1
SUSE-SU-2024:2362-1
SUSE-SU-2024:2372-1
SUSE-SU-2024:2384-1
SUSE-SU-2024:2394-1
SUSE-SU-2024:2902-1
SUSE-SU-2024:2929-1
SUSE-SU-2024:2939-1
Found an issue in the description? Have something to add? Feel free to write us 👾