CVE-2022-48717

Name of the Vulnerable Software and Affected Versions: Linux kernel (affected versions not specified)

Description: The issue is related to an underflow in the speaker gain control put() function, which can lead to an out of bounds access. The concern is that negative values of priv->gain might come from the user via snd ctl elem write user(), snd ctl elem write(), and kctl->put(). This could potentially allow an attacker to cause a denial of service.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.