In the Linux kernel, the following vulnerability has been resolved:

ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()

There may be a bad USB audio device with a USB ID of (0x04fa, 0x4201) and
the number of it's interfaces less than 4, an out-of-bounds read bug occurs
when parsing the interface descriptor for this device.

Fix this by checking the number of interfaces.

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00008.

Exploitation none

Automatable no

Technical Impact partial

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions
Linux Linux unaffected
Version Status Constraints
b9d43bcd061956c8144bcb453d07d13236b6ab28 affected < b970518014f2f0f6c493fb86c1e092b936899061
b9d43bcd061956c8144bcb453d07d13236b6ab28 affected < 91904870370fd986c29719846ed76d559de43251
b9d43bcd061956c8144bcb453d07d13236b6ab28 affected < 2a308e415d247a23d4d64c964c02e782eede2936
b9d43bcd061956c8144bcb453d07d13236b6ab28 affected < 0492798bf8dfcc09c9337a1ba065da1d1ca68712
b9d43bcd061956c8144bcb453d07d13236b6ab28 affected < 6123bec8480d23369e2ee0b2208611619f269faf
b9d43bcd061956c8144bcb453d07d13236b6ab28 affected < 98e8e67395cc6d0cdf3a771f86ea42d0ee6e59dd
b9d43bcd061956c8144bcb453d07d13236b6ab28 affected < 8293e61bbf908b18ff9935238d4fc2ad359e3fe0
b9d43bcd061956c8144bcb453d07d13236b6ab28 affected < e53f47f6c1a56d2af728909f1cb894da6b43d9bf
Linux Linux affected
Version Status Constraints
2.6.26 affected —
0 unaffected < 2.6.26
4.9.328 unaffected ≤ 4.9.*
4.14.293 unaffected ≤ 4.14.*
4.19.258 unaffected ≤ 4.19.*
5.4.213 unaffected ≤ 5.4.*
5.10.143 unaffected ≤ 5.10.*
5.15.68 unaffected ≤ 5.15.*
5.19.9 unaffected ≤ 5.19.*
6.0 unaffected ≤ *

Configuration 1 [-]

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.0:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.0:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.0:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.0:rc4:*:*:*:*:*:*
Package CPE Advisory Released Date
Red Hat Enterprise Linux 8
kernel-0:4.18.0-477.10.1.el8_8 cpe:/o:redhat:enterprise_linux:8 RHSA-2023:2951 2023-05-16T00:00:00Z
Red Hat Enterprise Linux 9
kernel-0:5.14.0-284.11.1.el9_2 cpe:/a:redhat:enterprise_linux:9 RHSA-2023:2458 2023-05-09T00:00:00Z
kernel-0:5.14.0-284.11.1.el9_2 cpe:/o:redhat:enterprise_linux:9 RHSA-2023:2458 2023-05-09T00:00:00Z

No data.

Project Subscriptions

Vendors Products
Linux Subscribe
Linux Kernel Subscribe
Redhat Subscribe
Enterprise Linux Subscribe
Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
https://git.kernel.org/stable/c/0492798bf8dfcc09c9337a1ba065da1d1ca68712 cve-icon cve-icon
https://git.kernel.org/stable/c/2a308e415d247a23d4d64c964c02e782eede2936 cve-icon cve-icon
https://git.kernel.org/stable/c/6123bec8480d23369e2ee0b2208611619f269faf cve-icon cve-icon
https://git.kernel.org/stable/c/8293e61bbf908b18ff9935238d4fc2ad359e3fe0 cve-icon cve-icon
https://git.kernel.org/stable/c/91904870370fd986c29719846ed76d559de43251 cve-icon cve-icon
https://git.kernel.org/stable/c/98e8e67395cc6d0cdf3a771f86ea42d0ee6e59dd cve-icon cve-icon
https://git.kernel.org/stable/c/b970518014f2f0f6c493fb86c1e092b936899061 cve-icon cve-icon
https://git.kernel.org/stable/c/e53f47f6c1a56d2af728909f1cb894da6b43d9bf cve-icon cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2022-48701 cve-icon
https://www.cve.org/CVERecord?id=CVE-2022-48701 cve-icon
History

Fri, 20 Jun 2025 14:45:00 +0000

Type Values Removed Values Added
Metrics threat_severity

Moderate

 threat_severity

Low

Thu, 19 Jun 2025 06:30:00 +0000

Type Values Removed Values Added
First Time appeared Redhat
Redhat enterprise Linux
CPEs cpe:/a:redhat:enterprise_linux:9
cpe:/o:redhat:enterprise_linux:8
cpe:/o:redhat:enterprise_linux:9
Vendors & Products Redhat
Redhat enterprise Linux

Wed, 18 Jun 2025 15:45:00 +0000

Type Values Removed Values Added
Metrics threat_severity

Low

 threat_severity

Moderate

Wed, 05 Mar 2025 15:30:00 +0000

Type Values Removed Values Added
First Time appeared Linux
Linux linux Kernel
Weaknesses CWE-125
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.0:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.0:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.0:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.0:rc4:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
Metrics cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}

 cvssV3_1

{'score': 7.1, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H'}

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2025-12-23T13:19:50.575Z

Reserved: 2024-05-03T14:55:07.146Z

Link: CVE-2022-48701

cve-icon Vulnrichment

Updated: 2024-08-03T15:17:55.711Z

cve-icon NVD

Status : Analyzed

Published: 2024-05-03T16:15:08.547

Modified: 2025-03-05T15:11:27.097

Link: CVE-2022-48701

cve-icon Redhat

Severity : Low

Publid Date: 2024-05-03T00:00:00Z

Links: CVE-2022-48701 - Bugzilla

cve-icon OpenCVE Enrichment

No data.

Weaknesses