CVE-2022-48702

CVE-2022-48702 is an out-of-bounds access vulnerability in the Linux kernel's ALSA emu10k1 sound driver. Specifically, the snd_emu10k1_pcm_channel_alloc() function can attempt to access memory beyond the allocated array for sound voices when the voice allocator wraps around and a high number of voices are requested. This vulnerability affects Linux kernel versions and can be triggered by local users, for example, by using 'aplay' with 16 channels. Rated with a CVSS score of 7.8 (HIGH), this vulnerability has a local attack vector and low attack complexity, requiring low privileges and no user interaction. Successful exploitation could lead to high confidentiality, integrity, and availability impacts, potentially causing system crashes or arbitrary code execution. There is no evidence of active exploitation, nor are there known public exploit codes (Metasploit, Nuclei, ExploitDB). Community discussion and media coverage for this CVE are minimal, indicating a low level of public awareness or attention.