Debian: CVE-2022-48717: linux -- security update

Debian: CVE-2022-48717: linux -- security update

Severity

4

CVSS

(AV:L/AC:M/Au:N/C:P/I:P/A:P)

Published

06/20/2024

Created

07/31/2024

Added

07/30/2024

Modified

07/30/2024

Description

In the Linux kernel, the following vulnerability has been resolved: ASoC: max9759: fix underflow in speaker_gain_control_put() Check for negative values of "priv->gain" to prevent an out of bounds access.The concern is that these might come from the user via: -> snd_ctl_elem_write_user() -> snd_ctl_elem_write() -> kctl->put()

Solution(s)

• debian-upgrade-linux

References

• https://attackerkb.com/topics/cve-2022-48717
• CVE - 2022-48717