CVE-2022-48701

A flaw was found in the Linux kernel ALSA USB audio driver. This vulnerability allows a denial of service via a crafted USB audio device.

This vulnerability is rated as Low impact for Red Hat Enterprise Linux because exploitation requires physical access to connect a malicious USB device to the host, or administrative privileges to attach virtual devices to a guest. Typical enterprise server deployments restrict physical port access, substantially limiting practical exposure. An out-of-bounds memory read triggered while parsing descriptor data from a malformed audio interface primarily results in kernel instability or denial of service.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.