CVE-2022-3170

2022-09-1315:36:36

CWE-125

redhat

www.cve.org

linux

sound subsystem

out-of-bounds access

privileged user

ioctl interface

AI Score

7.6

Confidence

High

EPSS

Percentile

5.1%

JSON

An out-of-bounds access issue was found in the Linux kernel sound subsystem. It could occur when the ‘id->name’ provided by the user did not end with ‘\0’. A privileged local user could pass a specially crafted name through ioctl() interface and crash the system or potentially escalate their privileges on the system.

CNA Affected

[
  {
    "product": "kernel",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "fixed in kernel 6.0-rc4"
      }
    ]
  }
]