CVE-2022-49045

kernel: ALSA: pcm: Test for "silence" field in struct "pcm_format_data"

Published Feb 26, 2025 CVSS 3.1 · 5.5 Medium EPSS n/a KEV · Not listed
Description
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2022-55158 This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
History
Type Values Removed Values Added
Weaknesses CWE-170
Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: ALSA: pcm: Test for "silence" field in struct "pcm_format_data" Syzbot reports "KASAN: null-ptr-deref Write in snd_pcm_format_set_silence".[1] It is due to missing validation of the "silence" field of struct "pcm_format_data" in "pcm_formats" array. Add a test for valid "pat" and, if it is not so, return -EINVAL. [1] https://lore.kernel.org/lkml/000000000000d188ef05dc2c7279@google.com/ This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
Title ALSA: pcm: Test for "silence" field in struct "pcm_format_data" kernel: ALSA: pcm: Test for "silence" field in struct "pcm_format_data"
Type Values Removed Values Added
References
Metrics threat_severity

None

cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}

threat_severity

Moderate

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: ALSA: pcm: Test for "silence" field in struct "pcm_format_data" Syzbot reports "KASAN: null-ptr-deref Write in snd_pcm_format_set_silence".[1] It is due to missing validation of the "silence" field of struct "pcm_format_data" in "pcm_formats" array. Add a test for valid "pat" and, if it is not so, return -EINVAL. [1] https://lore.kernel.org/lkml/000000000000d188ef05dc2c7279@google.com/
Title ALSA: pcm: Test for "silence" field in struct "pcm_format_data"
References

Subscriptions

No data.

Weaknesses

Sources

Status
REJECTED
Assigner
Linux
Published
Updated
Mar 2, 2025, 2:29 PM
Reserved
Feb 26, 2025, 1:49 AM
Status
Rejected
Published
Feb 26, 2025, 7:00 AM
Modified
Oct 18, 2026, 1:10 AM
Severity
Moderate
Public date
Feb 26, 2025, 12:00 AM