CVE-2022-49292

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A buffer allocation overflow issue has been identified in the Linux kernel, specifically in the ALSA oss PCM OSS layer. The problem occurs when the size of a temporary buffer for data conversion becomes unexpectedly large due to more channels or higher rates, potentially exceeding INT MAX and triggering a WARN ON(). The issue arises because the restrictions on input parameters are based solely on the hw params of the underlying PCM device. To address this, a patch has been implemented to add a limit of 1MB as the upper bound for period bytes and to perform size checks at two critical points.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.