CVE-2022-48889
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
21/08/2024
Last modified:
06/09/2024
Description
In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
ASoC: Intel: sof-nau8825: fix module alias overflow<br />
<br />
The maximum name length for a platform_device_id entry is 20 characters<br />
including the trailing NUL byte. The sof_nau8825.c file exceeds that,<br />
which causes an obscure error message:<br />
<br />
sound/soc/intel/boards/snd-soc-sof_nau8825.mod.c:35:45: error: illegal character encoding in string literal [-Werror,-Winvalid-source-encoding]<br />
MODULE_ALIAS("platform:adl_max98373_nau8825");<br />
^~~~<br />
include/linux/module.h:168:49: note: expanded from macro &#39;MODULE_ALIAS&#39;<br />
^~~~~~<br />
include/linux/module.h:165:56: note: expanded from macro &#39;MODULE_INFO&#39;<br />
^~~~<br />
include/linux/moduleparam.h:26:47: note: expanded from macro &#39;__MODULE_INFO&#39;<br />
= __MODULE_INFO_PREFIX __stringify(tag) "=" info<br />
<br />
I could not figure out how to make the module handling robust enough<br />
to handle this better, but as a quick fix, using slightly shorter<br />
names that are still unique avoids the build issue.
Impact
Base Score 3.x
5.50
Severity 3.x
MEDIUM
Vulnerable products and versions
| CPE | From | Up to |
|---|---|---|
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 5.17 (including) | 6.1.7 (excluding) |
| cpe:2.3:o:linux:linux_kernel:6.2:rc1:*:*:*:*:*:* | ||
| cpe:2.3:o:linux:linux_kernel:6.2:rc2:*:*:*:*:*:* | ||
| cpe:2.3:o:linux:linux_kernel:6.2:rc3:*:*:*:*:*:* |
To consult the complete list of CPE names with products and versions, see this page



