NVD Vulnerability Detail

CVE-2022-48917

Summary	In the Linux kernel, the following vulnerability has been resolved: ASoC: ops: Shift tested values in snd_soc_put_volsw() by +min While the $val/$val2 values passed in from userspace are always >= 0 integers, the limits of the control can be signed integers and the $min can be non-zero and less than zero. To correctly validate $val/$val2 against platform_max, add the $min offset to val first.
Publication Date	Aug. 22, 2024, 11:15 a.m.
Registration Date	Aug. 26, 2024, 4:57 p.m.
Last Update	Sept. 12, 2024, 10:07 p.m.

Affected software configurations

Related information, measures and tools

No	URL	タグ
1	https://git.kernel.org/stable/c/69f42e41256d5a234d3ae0d35fa66dc6d8171846	Patch
2	https://git.kernel.org/stable/c/7e0e4bc93811cf600508ff36f07abea7b40643ed	Patch
3	https://git.kernel.org/stable/c/0b2ecc9163472128e7f30b517bee92dcd27ffc34	Patch
4	https://git.kernel.org/stable/c/f3537f1b2bfd3b1df15723df49fc26eccd5112fe	Patch
5	https://git.kernel.org/stable/c/6951a5888165a38bb7c39a2d18f5668b2f1241c7	Patch
6	https://git.kernel.org/stable/c/050b1821f27c5d4fd5a298f6e62c3d3c9335e622	Patch
7	https://git.kernel.org/stable/c/70712d5afbbea898d5f51fa02e315fe0a4835043	Patch
8	https://git.kernel.org/stable/c/9bdd10d57a8807dba0003af0325191f3cec0f11c	Patch

Common Vulnerabilities List

JVN Vulnerability Information

Linux の Linux Kernel における脆弱性

Title	Linux の Linux Kernel における脆弱性
Summary	Linux の Linux Kernel には、不特定の脆弱性が存在します。
Possible impacts	サービス運用妨害 (DoS) 状態にされる可能性があります。
Solution	ベンダより正式な対策が公開されています。ベンダ情報を参照して適切な対策を実施してください。
Publication Date	Feb. 16, 2022, midnight
Registration Date	Sept. 13, 2024, 3:08 p.m.
Last Update	Sept. 13, 2024, 3:08 p.m.

Affected System

Linux

Linux Kernel 4.14.265 以上 4.14.270 未満

Linux Kernel 4.19.228 以上 4.19.233 未満

Linux Kernel 4.9.300 以上 4.9.305 未満

Linux Kernel 5.10.99 以上 5.10.104 未満

Linux Kernel 5.15.22 以上 5.15.27 未満

Linux Kernel 5.16.8 以上 5.16.13 未満

Linux Kernel 5.4.178 以上 5.4.183 未満

CVE (情報セキュリティ共通脆弱性識別子)

No	Name	URL
Common Vulnerabilities and Exposures (CVE)
1	CVE-2022-48917	https://www.cve.org/CVERecord?id=CVE-2022-48917
National Vulnerability Database (NVD)
2	CVE-2022-48917	https://nvd.nist.gov/vuln/detail/CVE-2022-48917

CWE (共通脆弱性タイプ一覧)

No	Name	URL
JVNDB
1	CWE-noinfo	https://www.ipa.go.jp/security/vuln/scap/cwe.html

ベンダー情報

No	Name	URL
Kernel.org git repositories
1	ASoC: ops: Shift tested values in snd_soc_put_volsw() by +min (050b182)	https://git.kernel.org/stable/c/050b1821f27c5d4fd5a298f6e62c3d3c9335e622
2	ASoC: ops: Shift tested values in snd_soc_put_volsw() by +min (0b2ecc9)	https://git.kernel.org/stable/c/0b2ecc9163472128e7f30b517bee92dcd27ffc34
3	ASoC: ops: Shift tested values in snd_soc_put_volsw() by +min (6951a58)	https://git.kernel.org/stable/c/6951a5888165a38bb7c39a2d18f5668b2f1241c7
4	ASoC: ops: Shift tested values in snd_soc_put_volsw() by +min (69f42e4)	https://git.kernel.org/stable/c/69f42e41256d5a234d3ae0d35fa66dc6d8171846
5	ASoC: ops: Shift tested values in snd_soc_put_volsw() by +min (70712d5)	https://git.kernel.org/stable/c/70712d5afbbea898d5f51fa02e315fe0a4835043
6	ASoC: ops: Shift tested values in snd_soc_put_volsw() by +min (7e0e4bc)	https://git.kernel.org/stable/c/7e0e4bc93811cf600508ff36f07abea7b40643ed
7	ASoC: ops: Shift tested values in snd_soc_put_volsw() by +min (9bdd10d)	https://git.kernel.org/stable/c/9bdd10d57a8807dba0003af0325191f3cec0f11c
8	ASoC: ops: Shift tested values in snd_soc_put_volsw() by +min (f3537f1)	https://git.kernel.org/stable/c/f3537f1b2bfd3b1df15723df49fc26eccd5112fe
Linux Kernel
9	Linux Kernel Archives	https://www.kernel.org

Change Log

No	Changed Details	Date of change
1	[2024年09月13日] 掲載	Sept. 13, 2024, 3:08 p.m.