CVE-2022-49045 - Vulnerability Details

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

No EPSS score available.

Key SSVC decision points have not yet been added.

No data.

Advisories

Source	ID	Title
EUVD	EUVD-2022-55158	This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References

Link	Providers
https://lore.kernel.org/linux-cve-announce/2025022650-CVE-2022-49045-7d21@gregkh/T
https://nvd.nist.gov/vuln/detail/CVE-2022-49045
https://www.cve.org/CVERecord?id=CVE-2022-49045

History

Thu, 01 May 2025 02:45:00 +0000

Type	Values Removed	Values Added
Weaknesses		CWE-170

Sun, 02 Mar 2025 15:45:00 +0000

Type	Values Removed	Values Added
References	https://git.kernel.org/stable/c/2f7a26abb8241a0208c68d22815aa247c5ddacab https://git.kernel.org/stable/c/377a80ca6590f40ec8a85227b889a5d399fe26c3 https://git.kernel.org/stable/c/63038f6e96a77a0abf8083649c53e6a72c1a0124 https://git.kernel.org/stable/c/77af45df08768401602472f3e3879dce14f55497 https://git.kernel.org/stable/c/912797e54c99a98f0722f21313e13a3938bb6dba https://git.kernel.org/stable/c/97345c90235b1bb7661e7a428d9dcb96b1d7f5d4 https://git.kernel.org/stable/c/c3b2f23bfe5452b00eb1c842bc71098449e4ad9f https://git.kernel.org/stable/c/eb04e3112a3516e483d60a9af9762961702a6c1b

Sun, 02 Mar 2025 14:45:00 +0000

Type	Values Removed	Values Added
Description	In the Linux kernel, the following vulnerability has been resolved: ALSA: pcm: Test for "silence" field in struct "pcm_format_data" Syzbot reports "KASAN: null-ptr-deref Write in snd_pcm_format_set_silence".[1] It is due to missing validation of the "silence" field of struct "pcm_format_data" in "pcm_formats" array. Add a test for valid "pat" and, if it is not so, return -EINVAL. [1] https://lore.kernel.org/lkml/000000000000d188ef05dc2c7279@google.com/	This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
Title	ALSA: pcm: Test for "silence" field in struct "pcm_format_data"	kernel: ALSA: pcm: Test for "silence" field in struct "pcm_format_data"

Thu, 27 Feb 2025 13:30:00 +0000

Type	Values Removed	Values Added
References		https://lore.kernel.org/linux-cve-announce/2025022650-CVE-2022-49045-7d21@gregkh/T https://nvd.nist.gov/vuln/detail/CVE-2022-49045 https://www.cve.org/CVERecord?id=CVE-2022-49045
Metrics	threat_severity `None`	cvssV3_1 `{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}` threat_severity `Moderate`

Wed, 26 Feb 2025 02:15:00 +0000

Type	Values Removed	Values Added
Description		In the Linux kernel, the following vulnerability has been resolved: ALSA: pcm: Test for "silence" field in struct "pcm_format_data" Syzbot reports "KASAN: null-ptr-deref Write in snd_pcm_format_set_silence".[1] It is due to missing validation of the "silence" field of struct "pcm_format_data" in "pcm_formats" array. Add a test for valid "pat" and, if it is not so, return -EINVAL. [1] https://lore.kernel.org/lkml/000000000000d188ef05dc2c7279@google.com/
Title		ALSA: pcm: Test for "silence" field in struct "pcm_format_data"
References		https://git.kernel.org/stable/c/2f7a26abb8241a0208c68d22815aa247c5ddacab https://git.kernel.org/stable/c/377a80ca6590f40ec8a85227b889a5d399fe26c3 https://git.kernel.org/stable/c/63038f6e96a77a0abf8083649c53e6a72c1a0124 https://git.kernel.org/stable/c/77af45df08768401602472f3e3879dce14f55497 https://git.kernel.org/stable/c/912797e54c99a98f0722f21313e13a3938bb6dba https://git.kernel.org/stable/c/97345c90235b1bb7661e7a428d9dcb96b1d7f5d4 https://git.kernel.org/stable/c/c3b2f23bfe5452b00eb1c842bc71098449e4ad9f https://git.kernel.org/stable/c/eb04e3112a3516e483d60a9af9762961702a6c1b

MITRE

Status: REJECTED

Assigner: Linux

Published: 2025-02-26T01:54:22.168Z

Updated: 2025-03-02T14:29:14.527Z

Reserved: 2025-02-26T01:49:39.241Z

Link: CVE-2022-49045

Vulnrichment

No data.

NVD

Status : Rejected

Published: 2025-02-26T07:00:41.790

Modified: 2025-03-02T15:15:11.130

Link: CVE-2022-49045

Redhat

Severity : Moderate

Publid Date: 2025-02-26T00:00:00Z

Links: CVE-2022-49045 - Bugzilla

OpenCVE Enrichment

No data.

Metrics

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

Affected Vendors & Products

JSON object

JSON object

JSON object

JSON object

JSON object