CVE Feed

    Dashboard / CVE / CVE-2022-48738

    CVE-2022-48738

    In the Linux kernel, the following vulnerability has been resolved: ASoC: ops: Reject out of bounds values in snd_soc_put_volsw() We don't currently validate that the values being set are within the range we advertised to userspace as being valid, do so and reject any values that are out of range.

    Published:Jun 20, 2024
    Last Modified:Dec 23, 2025
    EPS:Jun 20, 2024
    EPSS Score:0.00014
    CVSS Score:7.1

    Affected Products

    Vendor
    Linux
    Product
    Linux Kernel
    Vendor
    Redhat
    Product
    Enterprise Linux

    Exploits

    No exploit reference

    Common Weakness Enumeration

    CWE-125 Out-of-bounds Read

    Common Attack Pattern Enumeration and Classification (CAPEC)

    CAPEC-540 Overread Buffers

    Related CVEs

    CVE-2026-80925 — In the Linux kernel, the following vulnerability has been resolved: vlan: fix skb_under_panic and races when …
    CVE-2026-80924 (CVSS 7.5) — In the Linux kernel, the following vulnerability has been resolved: crypto: krb5 - use kfree_sensitive() for …
    CVE-2026-80923 — In the Linux kernel, the following vulnerability has been resolved: xhci: dbgtty: Fix unregister on tty_regis…
    CVE-2026-80922 — In the Linux kernel, the following vulnerability has been resolved: crypto: qcom-rng - Allow zero as a random…
    CVE-2026-80921 (CVSS 8.8) — In the Linux kernel, the following vulnerability has been resolved: KVM: s390: vsie: zero stale crypto bits …
    CVE-2026-80920 — In the Linux kernel, the following vulnerability has been resolved: io_uring: defer eventfd signaling when qu…
    CVE-2026-80919 — In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix recursive ww_mutex acquir…
    CVE-2026-80918 — In the Linux kernel, the following vulnerability has been resolved: HID: core: fix number/pointer type confus…
    CVE-2026-80917 — In the Linux kernel, the following vulnerability has been resolved: PCI: host-generic: Fix NULL pointer deref…
    CVE-2026-80916 — In the Linux kernel, the following vulnerability has been resolved: kcov: fix data corruption and race condit…

    References

    https://git.kernel.org/stable/c/40f598698129b5ceaf31012f9501b775c7b6e57d
    https://git.kernel.org/stable/c/586ef863c94354a7e00e5ae5ef01443d1dc99bc7
    https://git.kernel.org/stable/c/65a61b1f56f5386486757930069fbdce94af08bf
    https://git.kernel.org/stable/c/68fd718724284788fc5f379e0b7cac541429ece7
    https://git.kernel.org/stable/c/817f7c9335ec01e0f5e8caffc4f1dcd5e458a4c0
    https://git.kernel.org/stable/c/9e8895f1b3d4433f6d78aa6578e9db61ca6e6830
    https://git.kernel.org/stable/c/a9394f21fba027147bf275b083c77955864c366a
    https://git.kernel.org/stable/c/bb72d2dda85564c66d909108ea6903937a41679d
    https://git.kernel.org/stable/c/40f598698129b5ceaf31012f9501b775c7b6e57d
    https://git.kernel.org/stable/c/586ef863c94354a7e00e5ae5ef01443d1dc99bc7
    https://git.kernel.org/stable/c/65a61b1f56f5386486757930069fbdce94af08bf
    https://git.kernel.org/stable/c/68fd718724284788fc5f379e0b7cac541429ece7
    https://git.kernel.org/stable/c/817f7c9335ec01e0f5e8caffc4f1dcd5e458a4c0
    https://git.kernel.org/stable/c/9e8895f1b3d4433f6d78aa6578e9db61ca6e6830
    https://git.kernel.org/stable/c/a9394f21fba027147bf275b083c77955864c366a
    https://git.kernel.org/stable/c/bb72d2dda85564c66d909108ea6903937a41679d

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High