CVE-2022-49518

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An out-of-bounds read issue exists in the sof get control data() function within the sound/soc/sof/ipc3-topology.c module of the Linux kernel SoC sound support. The issue occurs because the function expects the payload to be of bytes type, but it also handles other control types using a payload parsing implementation that is only valid for bytes. A malicious actor could craft a topology to trigger this out-of-bounds access, potentially leading to a denial of service or unauthorized access to protected information.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.