Back
CVE-2022-48738
ASoC: ops: Reject out of bounds values in snd_soc_put_volsw()
High7.1EPSS 0.23%
- Published
- Updated
- Reserved
- Assigned by
- Linux
Description
In the Linux kernel, the following vulnerability has been resolved: ASoC: ops: Reject out of bounds values in snd_soc_put_volsw() We don't currently validate that the values being set are within the range we advertised to userspace as being valid, do so and reject any values that are out of range.
Scores
| Scored by | CVSS | Score | Vector |
|---|---|---|---|
| NVDNVD · Analyzed | 3.1 | High7.1 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H |
- EPSS (exploitation in 30 days)
- 0.23% · top 86% of all CVEs (6 Nov 2026)
- CISA SSVC
- Exploitation: none · Automatable: no · Technical impact: partial
Loading the EPSS history…
The list uses the assigner's score when there is one, then CISA's, then NVD's: High 7.1.
Weakness
Affected products
- affected f227b88f0fce5f9b82aa934f8829a741c2e06d82 – < 40f598698129b5ceaf31012f9501b775c7b6e57d
- affected f227b88f0fce5f9b82aa934f8829a741c2e06d82 – < 586ef863c94354a7e00e5ae5ef01443d1dc99bc7
- affected f227b88f0fce5f9b82aa934f8829a741c2e06d82 – < 65a61b1f56f5386486757930069fbdce94af08bf
- affected f227b88f0fce5f9b82aa934f8829a741c2e06d82 – < 68fd718724284788fc5f379e0b7cac541429ece7
- affected f227b88f0fce5f9b82aa934f8829a741c2e06d82 – < a9394f21fba027147bf275b083c77955864c366a
- affected f227b88f0fce5f9b82aa934f8829a741c2e06d82 – < 9e8895f1b3d4433f6d78aa6578e9db61ca6e6830
- affected f227b88f0fce5f9b82aa934f8829a741c2e06d82 – < bb72d2dda85564c66d909108ea6903937a41679d
- affected f227b88f0fce5f9b82aa934f8829a741c2e06d82 – < 817f7c9335ec01e0f5e8caffc4f1dcd5e458a4c0
- affected 3.15
- unaffected < 3.15
- unaffected 4.9.300 – ≤ 4.9.*
- unaffected 4.14.265 – ≤ 4.14.*
- unaffected 4.19.228 – ≤ 4.19.*
- unaffected 5.4.178 – ≤ 5.4.*
- unaffected 5.10.99 – ≤ 5.10.*
- unaffected 5.15.22 – ≤ 5.15.*
- unaffected 5.16.8 – ≤ 5.16.*
- unaffected 5.17 – ≤ *
References (8)
- https://git.kernel.org/stable/c/40f598698129b5ceaf31012f9501b775c7b6e57d (opens in a new tab)x_transferred
- https://git.kernel.org/stable/c/586ef863c94354a7e00e5ae5ef01443d1dc99bc7 (opens in a new tab)x_transferred
- https://git.kernel.org/stable/c/65a61b1f56f5386486757930069fbdce94af08bf (opens in a new tab)x_transferred
- https://git.kernel.org/stable/c/68fd718724284788fc5f379e0b7cac541429ece7 (opens in a new tab)x_transferred
- https://git.kernel.org/stable/c/a9394f21fba027147bf275b083c77955864c366a (opens in a new tab)x_transferred
- https://git.kernel.org/stable/c/9e8895f1b3d4433f6d78aa6578e9db61ca6e6830 (opens in a new tab)x_transferred
- https://git.kernel.org/stable/c/bb72d2dda85564c66d909108ea6903937a41679d (opens in a new tab)x_transferred
- https://git.kernel.org/stable/c/817f7c9335ec01e0f5e8caffc4f1dcd5e458a4c0 (opens in a new tab)x_transferred
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisories (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Badge for a README or a ticket
[](https://trackcve.app/cve/CVE-2022-48738)Record last updated .