CVE-2022-48716

Mixer controls store a channel identifier in the mixer->reg field, which is not identical to the port identifier. The correct port id should be retrieved from the chan_info array. Incorrect use of channel id instead of port id for indexing the port_map array can cause out-of-bounds write or read operations, leading to corruption of the wcd938x_sdw_priv structure. This is a classic case of uncontrolled resource consumption or memory corruption (CWE-400).

Local attackers or malicious processes can cause memory corruption in the kernel, which may result in privilege escalation, system instability, or system crash. In extreme cases, full system control is possible.

Apply patches available from the vendor according to references — fixes have been published in the Linux kernel stable repository under commits: 9167f2712dc8, aa7152f9f117, and c5c1546a654f. It is recommended to update the kernel to a version containing the indicated patches.

Linux kernel containing the ASoC driver for the wcd938x codec — specific versions indicated in vendor references (commits in the Linux kernel stable repository).