CVE-2022-49538

Summary

CVE-2022-49538 is a vulnerability affecting the Linux kernel's ALSA (Advanced Linux Sound Architecture) subsystem. Specifically, in the ASoC (Advanced Sound and Connectivity) implementation, there is a risk of a NULL pointer dereference. This occurs when input_dev is being unregistered during a call to snd_jack_report, which should have been protected by a mutex lock. The vulnerability could lead to system instability or even crashes, and it has been addressed by implementing proper mutex synchronization to prevent concurrent access to input_dev.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.