Debian: CVE-2022-48716: linux -- security update

Debian: CVE-2022-48716: linux -- security update

Severity

4

CVSS

(AV:L/AC:M/Au:N/C:P/I:P/A:P)

Published

06/20/2024

Created

07/31/2024

Added

07/30/2024

Modified

07/30/2024

Description

In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: wcd938x: fix incorrect used of portid Mixer controls have the channel id in mixer->reg, which is not same as port id. port id should be derived from chan_info array. So fix this. Without this, its possible that we could corrupt struct wcd938x_sdw_priv by accessing port_map array out of range with channel id instead of port id.

Solution(s)

• debian-upgrade-linux

References

• https://attackerkb.com/topics/cve-2022-48716
• CVE - 2022-48716