CVE-2022-48992 — ASoC: soc-pcm: Add NULL check in BE reparenting

Back Back to CVE browser

MEDIUM

ASoC: soc-pcm: Add NULL check in BE reparenting

Published Oct 21, 2024

5.5

MEDIUM

CVSS 3.1

EPSS 0.24%

Description

Add NULL check in dpcm_be_reparent API, to handle kernel NULL pointer dereference error. The issue occurred in fuzzing test.

Affected products

Vendor Linux Product Linux Default
unaffected
- Version
  
  Status
  affected
  Constraints
- Version
  
  Status
  affected
  Constraints
- Version
  
  Status
  affected
  Constraints
- Version
  
  Status
  affected
  Constraints
- Version
  
  Status
  affected
  Constraints
- Version
  
  Status
  affected
  Constraints
- Version
  
  Status
  affected
  Constraints
- Version
  
  Status
  affected
  Constraints
Vendor Linux Product Linux Default
affected
- Version
  3.5
  Status
  affected
  Constraints
  -
- Version
  0
  Status
  unaffected
  Constraints
  <3.5
- Version
  4.14.302
  Status
  unaffected
  Constraints
  <=4.14.*
- Version
  4.19.269
  Status
  unaffected
  Constraints
  <=4.19.*
- Version
  4.9.336
  Status
  unaffected
  Constraints
  <=4.9.*
- Version
  5.10.159
  Status
  unaffected
  Constraints
  <=5.10.*
- Version
  5.15.83
  Status
  unaffected
  Constraints
  <=5.15.*
- Version
  5.4.227
  Status
  unaffected
  Constraints
  <=5.4.*
- Version
  6.0.13
  Status
  unaffected
  Constraints
  <=6.0.*
- Version
  6.1
  Status
  unaffected
  Constraints
  <=*

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Linux

unaffected

Version	Status	Constraints
	affected
	affected
	affected
	affected
	affected
	affected
	affected
	affected

Linux

affected

Version	Status	Constraints
3.5	affected	-
0	unaffected	<3.5
4.14.302	unaffected	<=4.14.*
4.19.269	unaffected	<=4.19.*
4.9.336	unaffected	<=4.9.*
5.10.159	unaffected	<=5.10.*
5.15.83	unaffected	<=5.15.*
5.4.227	unaffected	<=5.4.*
6.0.13	unaffected	<=6.0.*
6.1	unaffected	<=*

Red Hat Enterprise Linux 8

kernel-0:4.18.0-477.10.1.el8_8

Fixed · RHSA-2023:2951
Red Hat Enterprise Linux 9

kernel-0:5.14.0-284.11.1.el9_2

Fixed · RHSA-2023:2458
Red Hat Enterprise Linux 9

kernel-0:5.14.0-284.11.1.el9_2

Fixed · RHSA-2023:2458
Red Hat Enterprise Linux 6

kernel

Not affected
Red Hat Enterprise Linux 7

kernel

Out of support scope
Red Hat Enterprise Linux 7

kernel-rt

Out of support scope
Red Hat Enterprise Linux 8

kernel-rt

Affected
Red Hat Enterprise Linux 9

kernel-rt

Affected

Product	Package	State	Advisory
Red Hat Enterprise Linux 8	kernel-0:4.18.0-477.10.1.el8_8	Fixed	RHSA-2023:2951
Red Hat Enterprise Linux 9	kernel-0:5.14.0-284.11.1.el9_2	Fixed	RHSA-2023:2458
Red Hat Enterprise Linux 9	kernel-0:5.14.0-284.11.1.el9_2	Fixed	RHSA-2023:2458
Red Hat Enterprise Linux 6	kernel	Not affected	n/a
Red Hat Enterprise Linux 7	kernel	Out of support scope	n/a
Red Hat Enterprise Linux 7	kernel-rt	Out of support scope	n/a
Red Hat Enterprise Linux 8	kernel-rt	Affected	n/a
Red Hat Enterprise Linux 9	kernel-rt	Affected	n/a

Remediation

Red Hat statement

This issue is fixed in RHEL-9.2 and above (including 8.10): ~~~ in (rhel-9.2, rhel-9.3, rhel-9.4, rhel-9.5, rhel-9.6) ASoC: soc-pcm: Add NULL check in BE reparenting in (rhel-8.8, rhel-8.9, rhel-8.10) ASoC: soc-pcm: Add NULL check in BE reparenting ~~~ Please note that while RHEL-9 kernel-rt still appears as affected, it has been fixed in the same RHSA as RHEL-9 kernel. This is because from RHEL-9.3 onwards, the kernel and kernel-rt fixes are bundled together in a single errata.

Metrics

0.24% 0.00236

Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 3, 2026.

EPSS probability 0.00236

Score over time

2024–2026

EPSS v3
EPSS v4
EPSS v5

Percentile over time

EPSS v3
EPSS v4
EPSS v5

Table of values (5 key points)

Flat stretches are collapsed; showing up to 120 newest points.

Date	Score	Percentile	Model
Oct 3, 2026	0.24% (0.00236)	13.23th	v5 (v2026.06.15)
Jun 15, 2026	0.24% (0.00235)	14.25th	v5 (v2026.06.15)
Mar 17, 2025	0.03% (0.00027)	4.57th	v4 (v2025.03.14)
Dec 12, 2024	0.04% (0.00042)	5.07th	v3 (v2023.03.01)
Oct 22, 2024	0.04% (0.00044)	13.93th	v3 (v2023.03.01)

Weaknesses (1)

CWE-476

NULL Pointer Dereference

References (13)

Link	Providers	Tags
https://access.redhat.com/security/cve/CVE-2022-48992		Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2320793		Issue Tracking
https://git.kernel.org/stable/c/0760acc2e6598ad4f7bd3662db2d907ef0838139		Patch
https://git.kernel.org/stable/c/34a9796bf0684bfd54e96a142560d560c21c983b		Patch
https://git.kernel.org/stable/c/9f74b9aa8d58c18927bb9b65dd5ba70a5fd61615		Patch
https://git.kernel.org/stable/c/d4dd21a79dbb862d2ebcf9ed90e646416009ff0d		Patch
https://git.kernel.org/stable/c/db8f91d424fe0ea6db337aca8bc05908bbce1498		Patch
https://git.kernel.org/stable/c/e7166d6821c15f3516bcac8ae3f155924da1908c		Patch
https://git.kernel.org/stable/c/f2ba66d8738584d124aff4e760ed1337f5f6dfb6		Patch
https://git.kernel.org/stable/c/f6f45e538328df9ce66aa61bafee1a5717c4b700		Patch
https://lore.kernel.org/linux-cve-announce/2024102148-CVE-2022-48992-2962@gregkh/T
https://nvd.nist.gov/vuln/detail/CVE-2022-48992
https://www.cve.org/CVERecord?id=CVE-2022-48992