cve 2022 48716

CVE-2022-48716 is a Linux kernel vulnerability in the ASoC codec driver for Qualcomm's WCD938x audio chip family. The bug occurs when mixer controls incorrectly use a channel ID instead of a port ID, leading to out-of-bounds access of an internal port_map array. This memory-safety issue can corrupt the driver's private state, posing an availability risk. The fix was upstreamed and backported into stable kernel releases. System administrators should prioritize patching and rebooting any hosts that load the WCD938x codec driver. This tag covers the vulnerability details, the patch, and remediation steps for affected Linux systems.