PT-2024-9261 · Linux+5 · Linux Kernel+5

Mark Brown · Published 2022-11-08 · Updated 2025-09-29 · CVE-2022-48738

Positive Technologies (AI Summary)

CVSS v3.1

7.1

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

Name of the Vulnerable Software and Affected Versions: Linux kernel (affected versions not specified)

Description: The issue is related to the ASoC: ops component of the Linux kernel, where it fails to validate that the values being set are within the range advertised to userspace as being valid. This can lead to out-of-bounds values being accepted, potentially causing issues. The problem is resolved by rejecting any values that are out of range in the snd soc put volsw() function. There is also a mention of a potential buffer overflow error, which could allow an attacker to cause a denial of service.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

ALSA-2025_16880

BDU:2024-10949

CESA-2022_7683

CVE-2022-48738

OESA-2024-1835

OPENSUSE-SU-2024_2362-1

OPENSUSE-SU-2024_2372-1

OPENSUSE-SU-2024_2394-1

RHSA-2022:7683

RHSA-2022:8267

RHSA-2022_7683

RHSA-2022_8267

SUSE-SU-2024:2362-1

SUSE-SU-2024:2372-1

SUSE-SU-2024:2384-1

SUSE-SU-2024:2394-1

SUSE-SU-2024:2902-1

SUSE-SU-2024:2929-1

SUSE-SU-2024:2939-1

Affected Products

Astra Linux

Centos

Linux Kernel

Red Hat

Red Os

Suse

References · 1280

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/48xxx/CVE-2022-48738.json · Exploit
• https://osv.dev/vulnerability/SUSE-SU-2024:2362-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-38780 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2024:2939-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-38579 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-38559 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-38546 · Security Note
• https://git.kernel.org/stable/c/586ef863c94354a7e00e5ae5ef01443d1dc99bc7 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2022-48738 · Security Note
• https://git.kernel.org/stable/c/40f598698129b5ceaf31012f9501b775c7b6e57d · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2024-23848 · Security Note
• https://git.kernel.org/stable/c/a9394f21fba027147bf275b083c77955864c366a · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2024-38554 · Security Note
• https://osv.dev/vulnerability/OESA-2024-1835 · Vendor Advisory
• https://git.kernel.org/stable/c/65a61b1f56f5386486757930069fbdce94af08bf · Patch