What’s Vulnerable › Vulnerabilities

CVE-2022-49005: ASoC: ops: Fix bounds check for _sx controls

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-10-21 · updated 2026-06-17

Description

In the Linux kernel, the following vulnerability has been resolved: ASoC: ops: Fix bounds check for _sx controls For _sx controls the semantics of the max field is not the usual one, max is the number of steps rather than the maximum value. This means that our check in snd_soc_put_volsw_sx() needs to just check against the maximum value.

Affected products

• Linux kernel: from 4.9.300 before 4.9.335; from 4.14.265 before 4.14.301; from 4.19.228 before 4.19.268; from 5.4.178 before 5.4.226; from 5.10.99 before 5.10.158; from 5.15.22 before 5.15.82 — fixed in 4.14.301, 4.19.268, 4.9.335, 5.10.158, 5.15.82, 5.17

How to fix

Upgrade to a fixed version: Linux kernel 4.14.301, 4.19.268, 4.9.335, 5.10.158. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/325d94d16e3131b54bdf07356e4cd855e0d853fc
• https://git.kernel.org/stable/c/46bab25cc0230df60d1c02b651cc5640a14b08df
• https://git.kernel.org/stable/c/4a95a49f26308782b4056401989ecd7768fda8fa
• https://git.kernel.org/stable/c/698813ba8c580efb356ace8dbf55f61dac6063a8
• https://git.kernel.org/stable/c/73dce3c1d48c4662bdf3ccbde1492c2cb4bfd8ce
• https://git.kernel.org/stable/c/98b15c706644bebc19d2e77ccc360cc51444f6d0
• https://git.kernel.org/stable/c/b50c9641897274c3faef5f95ac852f54b94be2e8
• https://git.kernel.org/stable/c/e46adadf19248d59af3aa6bc52e09115bf479bf7

Get alerted when CVE-2022-49005 or the next vulnerability affects your stack