Description

In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface() There may be a bad USB audio device with a USB ID of (0x04fa, 0x4201) and the number of it's interfaces less than 4, an out-of-bounds read bug occurs when parsing the interface descriptor for this device. Fix this by checking the number of interfaces.

INFO

Published Date :

2024-05-03T15:12:34.160Z

Last Modified :

2025-12-23T13:19:50.575Z

Source :

Linux
AFFECTED PRODUCTS

The following products are affected by CVE-2022-48701 vulnerability.

Vendors Products
Linux
  • Linux Kernel
Redhat
  • Enterprise Linux
REFERENCES

Here, you will find a curated list of external links that provide in-depth information to CVE-2022-48701.

URL Resource
https://git.kernel.org/stable/c/0492798bf8dfcc09c9337a1ba065da1d1ca68712 cve-icon cve-icon
https://git.kernel.org/stable/c/2a308e415d247a23d4d64c964c02e782eede2936 cve-icon cve-icon
https://git.kernel.org/stable/c/6123bec8480d23369e2ee0b2208611619f269faf cve-icon cve-icon
https://git.kernel.org/stable/c/8293e61bbf908b18ff9935238d4fc2ad359e3fe0 cve-icon cve-icon
https://git.kernel.org/stable/c/91904870370fd986c29719846ed76d559de43251 cve-icon cve-icon
https://git.kernel.org/stable/c/98e8e67395cc6d0cdf3a771f86ea42d0ee6e59dd cve-icon cve-icon
https://git.kernel.org/stable/c/b970518014f2f0f6c493fb86c1e092b936899061 cve-icon cve-icon
https://git.kernel.org/stable/c/e53f47f6c1a56d2af728909f1cb894da6b43d9bf cve-icon cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2022-48701 cve-icon
https://www.cve.org/CVERecord?id=CVE-2022-48701 cve-icon
Login to claim this CVE

CVSS Vulnerability Scoring System

Detailed values of each vector for above chart.
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality Impact
Integrity Impact
Availability Impact