CVE Feed

    Dashboard / CVE / CVE-2022-48701

    CVE-2022-48701

    In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface() There may be a bad USB audio device with a USB ID of (0x04fa, 0x4201) and the number of it's interfaces less than 4, an out-of-bounds read bug occurs when parsing the interface descriptor for this device. Fix this by checking the number of interfaces.

    Published:May 3, 2024
    Last Modified:Dec 23, 2025
    EPS:May 3, 2024
    EPSS Score:0.00008
    CVSS Score:7.1

    Affected Products

    Vendor
    Linux
    Product
    Linux Kernel
    Vendor
    Redhat
    Product
    Enterprise Linux

    Exploits

    No exploit reference

    Common Weakness Enumeration

    CWE-125 Out-of-bounds Read

    Common Attack Pattern Enumeration and Classification (CAPEC)

    CAPEC-540 Overread Buffers

    Related CVEs

    CVE-2026-80925 — In the Linux kernel, the following vulnerability has been resolved: vlan: fix skb_under_panic and races when …
    CVE-2026-80924 (CVSS 7.5) — In the Linux kernel, the following vulnerability has been resolved: crypto: krb5 - use kfree_sensitive() for …
    CVE-2026-80923 — In the Linux kernel, the following vulnerability has been resolved: xhci: dbgtty: Fix unregister on tty_regis…
    CVE-2026-80922 — In the Linux kernel, the following vulnerability has been resolved: crypto: qcom-rng - Allow zero as a random…
    CVE-2026-80921 (CVSS 8.8) — In the Linux kernel, the following vulnerability has been resolved: KVM: s390: vsie: zero stale crypto bits …
    CVE-2026-80920 — In the Linux kernel, the following vulnerability has been resolved: io_uring: defer eventfd signaling when qu…
    CVE-2026-80919 — In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix recursive ww_mutex acquir…
    CVE-2026-80918 — In the Linux kernel, the following vulnerability has been resolved: HID: core: fix number/pointer type confus…
    CVE-2026-80917 — In the Linux kernel, the following vulnerability has been resolved: PCI: host-generic: Fix NULL pointer deref…
    CVE-2026-80916 — In the Linux kernel, the following vulnerability has been resolved: kcov: fix data corruption and race condit…

    References

    https://git.kernel.org/stable/c/0492798bf8dfcc09c9337a1ba065da1d1ca68712
    https://git.kernel.org/stable/c/2a308e415d247a23d4d64c964c02e782eede2936
    https://git.kernel.org/stable/c/6123bec8480d23369e2ee0b2208611619f269faf
    https://git.kernel.org/stable/c/8293e61bbf908b18ff9935238d4fc2ad359e3fe0
    https://git.kernel.org/stable/c/91904870370fd986c29719846ed76d559de43251
    https://git.kernel.org/stable/c/98e8e67395cc6d0cdf3a771f86ea42d0ee6e59dd
    https://git.kernel.org/stable/c/b970518014f2f0f6c493fb86c1e092b936899061
    https://git.kernel.org/stable/c/e53f47f6c1a56d2af728909f1cb894da6b43d9bf
    https://git.kernel.org/stable/c/0492798bf8dfcc09c9337a1ba065da1d1ca68712
    https://git.kernel.org/stable/c/2a308e415d247a23d4d64c964c02e782eede2936
    https://git.kernel.org/stable/c/6123bec8480d23369e2ee0b2208611619f269faf
    https://git.kernel.org/stable/c/8293e61bbf908b18ff9935238d4fc2ad359e3fe0
    https://git.kernel.org/stable/c/91904870370fd986c29719846ed76d559de43251
    https://git.kernel.org/stable/c/98e8e67395cc6d0cdf3a771f86ea42d0ee6e59dd
    https://git.kernel.org/stable/c/b970518014f2f0f6c493fb86c1e092b936899061
    https://git.kernel.org/stable/c/e53f47f6c1a56d2af728909f1cb894da6b43d9bf

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High