CVE-2022-48717 - OpenCVE

In the Linux kernel, the following vulnerability has been resolved: ASoC: max9759: fix underflow in speaker_gain_control_put() Check for negative values of "priv->gain" to prevent an out of bounds access. The concern is that these might come from the user via: -> snd_ctl_elem_write_user() -> snd_ctl_elem_write() -> kctl->put()

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required High

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact partial

No data.

No data.

No data.

References

Link	Providers
https://git.kernel.org/stable/c/4c907bcd9dcd233da6707059d777ab389dcbd964
https://git.kernel.org/stable/c/5a45448ac95b715173edb1cd090ff24b6586d921
https://git.kernel.org/stable/c/71e60c170105d153e34d01766c1e4db26a4b24cc
https://git.kernel.org/stable/c/a0f49d12547d45ea8b0f356a96632dd503941c1e
https://git.kernel.org/stable/c/baead410e5db49e962a67fffc17ac30e44b50b7c
https://git.kernel.org/stable/c/f114fd6165dfb52520755cc4d1c1dfbd447b88b6
https://lore.kernel.org/linux-cve-announce/2024062055-CVE-2022-48717-064d@gregkh/T
https://nvd.nist.gov/vuln/detail/CVE-2022-48717
https://www.cve.org/CVERecord?id=CVE-2022-48717

History

Wed, 11 Sep 2024 13:30:00 +0000

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2024-06-20T11:13:09.959Z

Updated: 2024-11-04T12:15:09.592Z

Reserved: 2024-06-20T11:09:39.050Z

Link: CVE-2022-48717

Vulnrichment

Updated: 2024-08-03T15:17:55.849Z

NVD

Status : Awaiting Analysis

Published: 2024-06-20T11:15:55.287

Modified: 2024-06-20T12:43:25.663

Link: CVE-2022-48717

Redhat

Severity : Low

Publid Date: 2024-06-20T00:00:00Z

Links: CVE-2022-48717 - Bugzilla

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2022-48717", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2024-06-20T11:09:39.050Z", "datePublished": "2024-06-20T11:13:09.959Z", "dateUpdated": "2024-11-04T12:15:09.592Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2024-11-04T12:15:09.592Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nASoC: max9759: fix underflow in speaker_gain_control_put()\n\nCheck for negative values of \"priv->gain\" to prevent an out of bounds\naccess. The concern is that these might come from the user via:\n -> snd_ctl_elem_write_user()\n -> snd_ctl_elem_write()\n -> kctl->put()"}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["sound/soc/codecs/max9759.c"], "versions": [{"version": "fa8d915172b8", "lessThan": "a0f49d12547d", "status": "affected", "versionType": "git"}, {"version": "fa8d915172b8", "lessThan": "71e60c170105", "status": "affected", "versionType": "git"}, {"version": "fa8d915172b8", "lessThan": "5a45448ac95b", "status": "affected", "versionType": "git"}, {"version": "fa8d915172b8", "lessThan": "baead410e5db", "status": "affected", "versionType": "git"}, {"version": "fa8d915172b8", "lessThan": "f114fd6165df", "status": "affected", "versionType": "git"}, {"version": "fa8d915172b8", "lessThan": "4c907bcd9dcd", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["sound/soc/codecs/max9759.c"], "versions": [{"version": "4.17", "status": "affected"}, {"version": "0", "lessThan": "4.17", "status": "unaffected", "versionType": "semver"}, {"version": "4.19.228", "lessThanOrEqual": "4.19.*", "status": "unaffected", "versionType": "semver"}, {"version": "5.4.178", "lessThanOrEqual": "5.4.*", "status": "unaffected", "versionType": "semver"}, {"version": "5.10.99", "lessThanOrEqual": "5.10.*", "status": "unaffected", "versionType": "semver"}, {"version": "5.15.22", "lessThanOrEqual": "5.15.*", "status": "unaffected", "versionType": "semver"}, {"version": "5.16.8", "lessThanOrEqual": "5.16.*", "status": "unaffected", "versionType": "semver"}, {"version": "5.17", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "references": [{"url": "https://git.kernel.org/stable/c/a0f49d12547d45ea8b0f356a96632dd503941c1e"}, {"url": "https://git.kernel.org/stable/c/71e60c170105d153e34d01766c1e4db26a4b24cc"}, {"url": "https://git.kernel.org/stable/c/5a45448ac95b715173edb1cd090ff24b6586d921"}, {"url": "https://git.kernel.org/stable/c/baead410e5db49e962a67fffc17ac30e44b50b7c"}, {"url": "https://git.kernel.org/stable/c/f114fd6165dfb52520755cc4d1c1dfbd447b88b6"}, {"url": "https://git.kernel.org/stable/c/4c907bcd9dcd233da6707059d777ab389dcbd964"}], "title": "ASoC: max9759: fix underflow in speaker_gain_control_put()", "x_generator": {"engine": "bippy-9e1c9544281a"}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-03T15:17:55.849Z"}, "title": "CVE Program Container", "references": [{"url": "https://git.kernel.org/stable/c/a0f49d12547d45ea8b0f356a96632dd503941c1e", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/71e60c170105d153e34d01766c1e4db26a4b24cc", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/5a45448ac95b715173edb1cd090ff24b6586d921", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/baead410e5db49e962a67fffc17ac30e44b50b7c", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/f114fd6165dfb52520755cc4d1c1dfbd447b88b6", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/4c907bcd9dcd233da6707059d777ab389dcbd964", "tags": ["x_transferred"]}]}, {"metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2022-48717", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-09-10T17:11:22.587612Z"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-09-11T17:34:49.845Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://git.kernel.org/stable/c/a0f49d12547d45ea8b0f356a96632dd503941c1e", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/71e60c170105d153e34d01766c1e4db26a4b24cc", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/5a45448ac95b715173edb1cd090ff24b6586d921", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/baead410e5db49e962a67fffc17ac30e44b50b7c", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/f114fd6165dfb52520755cc4d1c1dfbd447b88b6", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/4c907bcd9dcd233da6707059d777ab389dcbd964", "tags": ["x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-03T15:17:55.849Z"}}, {"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2022-48717", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-09-10T17:11:22.587612Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-09-11T12:42:26.209Z"}}], "cna": {"title": "ASoC: max9759: fix underflow in speaker_gain_control_put()", "affected": [{"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "fa8d915172b8", "lessThan": "a0f49d12547d", "versionType": "git"}, {"status": "affected", "version": "fa8d915172b8", "lessThan": "71e60c170105", "versionType": "git"}, {"status": "affected", "version": "fa8d915172b8", "lessThan": "5a45448ac95b", "versionType": "git"}, {"status": "affected", "version": "fa8d915172b8", "lessThan": "baead410e5db", "versionType": "git"}, {"status": "affected", "version": "fa8d915172b8", "lessThan": "f114fd6165df", "versionType": "git"}, {"status": "affected", "version": "fa8d915172b8", "lessThan": "4c907bcd9dcd", "versionType": "git"}], "programFiles": ["sound/soc/codecs/max9759.c"], "defaultStatus": "unaffected"}, {"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "4.17"}, {"status": "unaffected", "version": "0", "lessThan": "4.17", "versionType": "semver"}, {"status": "unaffected", "version": "4.19.228", "versionType": "semver", "lessThanOrEqual": "4.19.*"}, {"status": "unaffected", "version": "5.4.178", "versionType": "semver", "lessThanOrEqual": "5.4.*"}, {"status": "unaffected", "version": "5.10.99", "versionType": "semver", "lessThanOrEqual": "5.10.*"}, {"status": "unaffected", "version": "5.15.22", "versionType": "semver", "lessThanOrEqual": "5.15.*"}, {"status": "unaffected", "version": "5.16.8", "versionType": "semver", "lessThanOrEqual": "5.16.*"}, {"status": "unaffected", "version": "5.17", "versionType": "original_commit_for_fix", "lessThanOrEqual": "*"}], "programFiles": ["sound/soc/codecs/max9759.c"], "defaultStatus": "affected"}], "references": [{"url": "https://git.kernel.org/stable/c/a0f49d12547d45ea8b0f356a96632dd503941c1e"}, {"url": "https://git.kernel.org/stable/c/71e60c170105d153e34d01766c1e4db26a4b24cc"}, {"url": "https://git.kernel.org/stable/c/5a45448ac95b715173edb1cd090ff24b6586d921"}, {"url": "https://git.kernel.org/stable/c/baead410e5db49e962a67fffc17ac30e44b50b7c"}, {"url": "https://git.kernel.org/stable/c/f114fd6165dfb52520755cc4d1c1dfbd447b88b6"}, {"url": "https://git.kernel.org/stable/c/4c907bcd9dcd233da6707059d777ab389dcbd964"}], "x_generator": {"engine": "bippy-9e1c9544281a"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nASoC: max9759: fix underflow in speaker_gain_control_put()\n\nCheck for negative values of \"priv->gain\" to prevent an out of bounds\naccess. The concern is that these might come from the user via:\n -> snd_ctl_elem_write_user()\n -> snd_ctl_elem_write()\n -> kctl->put()"}], "providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2024-11-04T12:15:09.592Z"}}}, "cveMetadata": {"cveId": "CVE-2022-48717", "state": "PUBLISHED", "dateUpdated": "2024-11-04T12:15:09.592Z", "dateReserved": "2024-06-20T11:09:39.050Z", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "datePublished": "2024-06-20T11:13:09.959Z", "assignerShortName": "Linux"}, "dataVersion": "5.1"}