CVE-2022-48738

Name of the Vulnerable Software and Affected Versions: Linux kernel (affected versions not specified)

Description: The issue is related to the ASoC: ops component of the Linux kernel, where it fails to validate that the values being set are within the range advertised to userspace as being valid. This can lead to out-of-bounds values being accepted, potentially causing issues. The problem is resolved by rejecting any values that are out of range in the snd soc put volsw() function. There is also a mention of a potential buffer overflow error, which could allow an attacker to cause a denial of service.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.