Description (CNA)
In the Linux kernel, the following vulnerability has been resolved: ASoC: max9759: fix underflow in speaker_gain_control_put() Check for negative values of "priv->gain" to prevent an out of bounds access. The concern is that these might come from the user via: -> snd_ctl_elem_write_user() -> snd_ctl_elem_write() -> kctl->put()
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Linux / Linux | affected fa8d915172b8c10ec0734c4021e99e9705023b07 before a0f49d12547d45ea8b0f356a96632dd503941c1e; affected fa8d915172b8c10ec0734c4021e99e9705023b07 before 71e60c170105d153e34d01766c1e4db26a4b24cc; affected fa8d915172b8c10ec0734c4021e99e9705023b07 before 5a45448ac95b715173edb1cd090ff24b6586d921; affected fa8d915172b8c10ec0734c4021e99e9705023b07 before baead410e5db49e962a67fffc17ac30e44b50b7c; affected fa8d915172b8c10ec0734c4021e99e9705023b07 before f114fd6165dfb52520755cc4d1c1dfbd447b88b6; affected fa8d915172b8c10ec0734c4021e99e9705023b07 before 4c907bcd9dcd233da6707059d777ab389dcbd964 |
| Linux / Linux | affected 4.17; unaffected 0 before 4.17; unaffected 4.19.228 through 4.19.*; unaffected 5.4.178 through 5.4.*; unaffected 5.10.99 through 5.10.*; unaffected 5.15.22 through 5.15.*; unaffected 5.16.8 through 5.16.*; unaffected 5.17 through * |
CWE
No CWE identifiers supplied.
References
- https://git.kernel.org/stable/c/a0f49d12547d45ea8b0f356a96632dd503941c1e
- https://git.kernel.org/stable/c/71e60c170105d153e34d01766c1e4db26a4b24cc
- https://git.kernel.org/stable/c/5a45448ac95b715173edb1cd090ff24b6586d921
- https://git.kernel.org/stable/c/baead410e5db49e962a67fffc17ac30e44b50b7c
- https://git.kernel.org/stable/c/f114fd6165dfb52520755cc4d1c1dfbd447b88b6
- https://git.kernel.org/stable/c/4c907bcd9dcd233da6707059d777ab389dcbd964
ADP enrichment
No English description supplied.
- https://git.kernel.org/stable/c/a0f49d12547d45ea8b0f356a96632dd503941c1e
- https://git.kernel.org/stable/c/71e60c170105d153e34d01766c1e4db26a4b24cc
- https://git.kernel.org/stable/c/5a45448ac95b715173edb1cd090ff24b6586d921
- https://git.kernel.org/stable/c/baead410e5db49e962a67fffc17ac30e44b50b7c
- https://git.kernel.org/stable/c/f114fd6165dfb52520755cc4d1c1dfbd447b88b6
- https://git.kernel.org/stable/c/4c907bcd9dcd233da6707059d777ab389dcbd964
No English description supplied.
No references supplied.