CVE-2022-48737 Affecting kernel-rt-trace-devel package, versions *
Threat Intelligence
Do your applications use this vulnerable package?
In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.
Test your applications- Snyk ID SNYK-CENTOS7-KERNELRTTRACEDEVEL-7340259
- published 21 Jun 2024
- disclosed 20 Jun 2024
How to fix?
There is no fixed version for Centos:7
kernel-rt-trace-devel
.
NVD Description
Note: Versions mentioned in the description apply only to the upstream kernel-rt-trace-devel
package and not the kernel-rt-trace-devel
package as distributed by Centos
.
See How to fix?
for Centos:7
relevant fixed versions and status.
In the Linux kernel, the following vulnerability has been resolved:
ASoC: ops: Reject out of bounds values in snd_soc_put_volsw_sx()
We don't currently validate that the values being set are within the range we advertised to userspace as being valid, do so and reject any values that are out of range.
References
- https://access.redhat.com/security/cve/CVE-2022-48737
- https://git.kernel.org/stable/c/038f8b7caa74d29e020949a43ca368c93f6b29b9
- https://git.kernel.org/stable/c/4977491e4b3aad8567f57e2a9992d251410c1db3
- https://git.kernel.org/stable/c/4f1e50d6a9cf9c1b8c859d449b5031cacfa8404e
- https://git.kernel.org/stable/c/9a12fcbf3c622f9bf6b110a873d62b0cba93972e
- https://git.kernel.org/stable/c/9e5c40b5706d8aae2cf70bd7e01f0b4575a642d0
- https://git.kernel.org/stable/c/c33402b056de61104b6146dedbe138ca8d7ec62b
- https://git.kernel.org/stable/c/e8e07c5e25a29e2a6f119fd947f55d7a55eb8a13
- https://git.kernel.org/stable/c/ef6cd9eeb38062a145802b7b56be7ae1090e165e