CVE-2022-49249 Details
Description
In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: wc938x: fix accessing array out of bounds for enum type Accessing enums using integer would result in array out of bounds access on platforms like aarch64 where sizeof(long) is 8 compared to enum size which is 4 bytes. Fix this by using enumerated items instead of integers.
A vulnerability in the Linux kernel's ASoC codecs for WC938X has been addressed. The issue involved accessing enums as integers, which led to out-of-bounds array access on AArch64 platforms where the size of long is 8 bytes, compared to the 4-byte size of the enum. The vulnerability has been fixed by using enumerated items instead of integers.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
No SSVC data is available for this CVE.
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://git.kernel.org/stable/c/adafea71b49ec4dbc44e0b84ec6eb602004a7a08 | kernel.org | Patch |
| https://git.kernel.org/stable/c/cc587b7c8fbbe128f6bd0dad025a0caea5e6d164 | kernel.org | Patch |
| https://git.kernel.org/stable/c/d09aee1b1da196be11ed86dd4897f228f2487613 | kernel.org | Patch |
| https://git.kernel.org/stable/c/f03c0c94186d5876857132d97e28f20cdc100bdc | kernel.org | Patch |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-125 | Out-of-bounds Read | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| linux linux kernel | >= 5.14, < 5.15.33 >= 5.16, < 5.16.19 >= 5.17, < 5.17.2 |
CPE
Remediation
| |
Change History
3 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | kernel.org |
| Sep 22, 2025 | Initial Analysis | [email protected] |
| Feb 26, 2025 | New CVE Received | kernel.org |