7.8
High
CVE-2022-48716 In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: wcd938x: fix incorrect used of…
Description
In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: wcd938x: fix incorrect used of portid Mixer controls have the channel id in mixer->reg, which is not same as port id. port id should be derived from chan_info array. So fix this. Without this, its possible that we could corrupt struct wcd938x_sdw_priv by accessing port_map array out of range with channel id instead of port id.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux 5.17 | earliest → < 5.17 | 5.17 |
| Linux 5.16 | earliest → < 5.16.8 | 5.16.8 |
| Linux 5.15 | earliest → < 5.15.22 | 5.15.22 |
| Linux | 5.14 | No fix stated |
| linux_kernel 5.17 | earliest → < 5.17 | 5.17 |
Other CVEs of Linux
The 18300 CVEs of Linux →
CVE-2026-99284
net: skbuff: propagate shared-frag marker in skb_zerocopy()
Not rated
CVE-2026-99283
netfilter: conntrack: tcp: use UNACK timeout for non-closing RST packets
Not rated
CVE-2026-99282
net/sched: sch_teql: fix use-after-free on lower qdisc drop
Not rated
CVE-2026-99281
tun: Require CAP_NET_ADMIN to attach to an ownerless device
Not rated