QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2022-48701

Back to search

CVE-2022-48701

Published: May 3, 2024

Modified: May 11, 2026

PUBLISHED

Description

In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface() There may be a bad USB audio device with a USB ID of (0x04fa, 0x4201) and the number of it's interfaces less than 4, an out-of-bounds read bug occurs when parsing the interface descriptor for this device. Fix this by checking the number of interfaces.

VendorProductVersions

Linux

Linux

affected
b9d43bcd061956c8144bcb453d07d13236b6ab28 - < b970518014f2f0f6c493fb86c1e092b936899061
affected
b9d43bcd061956c8144bcb453d07d13236b6ab28 - < 91904870370fd986c29719846ed76d559de43251
affected
b9d43bcd061956c8144bcb453d07d13236b6ab28 - < 2a308e415d247a23d4d64c964c02e782eede2936
affected
b9d43bcd061956c8144bcb453d07d13236b6ab28 - < 0492798bf8dfcc09c9337a1ba065da1d1ca68712
affected
b9d43bcd061956c8144bcb453d07d13236b6ab28 - < 6123bec8480d23369e2ee0b2208611619f269faf

+3 more versions

Linux

Linux

affected
2.6.26
unaffected
0 - < 2.6.26
unaffected
4.9.328 - <= 4.9.*
unaffected
4.14.293 - <= 4.14.*
unaffected
4.19.258 - <= 4.19.*

+5 more versions

References

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now