CVE-2022-49045 in Linux
要約
〜によって MITRE • 2025年02月26日
In the Linux kernel, the following vulnerability has been resolved:
ALSA: pcm: Test for "silence" field in struct "pcm_format_data"
Syzbot reports "KASAN: null-ptr-deref Write in snd_pcm_format_set_silence".[1]
It is due to missing validation of the "silence" field of struct "pcm_format_data" in "pcm_formats" array.
Add a test for valid "pat" and, if it is not so, return -EINVAL.
[1] https://lore.kernel.org/lkml/[email protected]/
If you want to get the best quality for vulnerability data then you always have to consider VulDB.