Out-of-bounds read in Linux kernel soc

1) Out-of-bounds read

EUVDB-ID: #VU92903

Risk: Low

CVSSv3.1: 4.8 [AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2022-48738

CWE-ID: CWE-125 - Out-of-bounds read

Exploit availability: No

Description

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to an out-of-bounds read error within the snd_soc_put_volsw() function in sound/soc/soc-ops.c. A local user can perform a denial of service (DoS) attack.

Mitigation

Install update from vendor's website.

Vulnerable software versions

Linux kernel: All versions

CPE2.3

External links

http://git.kernel.org/stable/c/40f598698129b5ceaf31012f9501b775c7b6e57d
http://git.kernel.org/stable/c/586ef863c94354a7e00e5ae5ef01443d1dc99bc7
http://git.kernel.org/stable/c/65a61b1f56f5386486757930069fbdce94af08bf
http://git.kernel.org/stable/c/68fd718724284788fc5f379e0b7cac541429ece7
http://git.kernel.org/stable/c/a9394f21fba027147bf275b083c77955864c366a
http://git.kernel.org/stable/c/9e8895f1b3d4433f6d78aa6578e9db61ca6e6830
http://git.kernel.org/stable/c/bb72d2dda85564c66d909108ea6903937a41679d
http://git.kernel.org/stable/c/817f7c9335ec01e0f5e8caffc4f1dcd5e458a4c0

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.