Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2022-48701 Details

Description

In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface() There may be a bad USB audio device with a USB ID of (0x04fa, 0x4201) and the number of it's interfaces less than 4, an out-of-bounds read bug occurs when parsing the interface descriptor for this device. Fix this by checking the number of interfaces.

Metrics

CVSS 3.x Severity and Vector Strings:

NIST: [email protected]CVSS-B:7.1 HIGHVector:CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
https://git.kernel.org/stable/c/0492798bf8dfcc09c9337a1ba065da1d1ca68712	kernel.org	Patch
https://git.kernel.org/stable/c/2a308e415d247a23d4d64c964c02e782eede2936	kernel.org	Patch
https://git.kernel.org/stable/c/6123bec8480d23369e2ee0b2208611619f269faf	kernel.org	Patch
https://git.kernel.org/stable/c/8293e61bbf908b18ff9935238d4fc2ad359e3fe0	kernel.org	Patch
https://git.kernel.org/stable/c/91904870370fd986c29719846ed76d559de43251	kernel.org	Patch
https://git.kernel.org/stable/c/98e8e67395cc6d0cdf3a771f86ea42d0ee6e59dd	kernel.org	Patch
https://git.kernel.org/stable/c/b970518014f2f0f6c493fb86c1e092b936899061	kernel.org	Patch
https://git.kernel.org/stable/c/e53f47f6c1a56d2af728909f1cb894da6b43d9bf	kernel.org	Patch
https://git.kernel.org/stable/c/0492798bf8dfcc09c9337a1ba065da1d1ca68712	CVE	Patch
https://git.kernel.org/stable/c/2a308e415d247a23d4d64c964c02e782eede2936	CVE	Patch
https://git.kernel.org/stable/c/6123bec8480d23369e2ee0b2208611619f269faf	CVE	Patch
https://git.kernel.org/stable/c/8293e61bbf908b18ff9935238d4fc2ad359e3fe0	CVE	Patch
https://git.kernel.org/stable/c/91904870370fd986c29719846ed76d559de43251	CVE	Patch
https://git.kernel.org/stable/c/98e8e67395cc6d0cdf3a771f86ea42d0ee6e59dd	CVE	Patch
https://git.kernel.org/stable/c/b970518014f2f0f6c493fb86c1e092b936899061	CVE	Patch
https://git.kernel.org/stable/c/e53f47f6c1a56d2af728909f1cb894da6b43d9bf	CVE	Patch

see all 16 references

Weakness Enumeration

CWE-ID	CWE Name	Source
CWE-125	Out-of-bounds Read	[email protected]

Affected Products

Product	Versions
linux linux kernel	< 4.9.328 >= 4.10, < 4.14.293 >= 4.15, < 4.19.258 >= 4.20, < 5.4.213 >= 5.5, < 5.10.143
CPE cpe:2.3:o:linux:linux_kernel:::::::: cpe:2.3:o:linux:linux_kernel:6.0:rc1:::::: cpe:2.3:o:linux:linux_kernel:6.0:rc2:::::: cpe:2.3:o:linux:linux_kernel:6.0:rc3:::::: cpe:2.3:o:linux:linux_kernel:6.0:rc4:::::: Remediation No remediation found in references.

Change History

7 change records found show changes

Date	Action	Recorded By
Jun 17, 2026	CVE Modified	CISA-ADP
Jun 17, 2026	CVE Modified	kernel.org
Mar 5, 2025	Initial Analysis	[email protected]
Nov 21, 2024	CVE Modified	CVE
May 28, 2024	CVE Modified	kernel.org
May 14, 2024	CVE Modified	kernel.org
May 3, 2024	New CVE Received	kernel.org