add: AVE-2022-0003

Author: adysec

vulns/2022/AVE-2022-0003.toml

@@ -1,39 +1,25 @@
-[id]
-ave_id = "AVE-2022-0003"
-cve_id = "CVE-2022-48716"
-aliases = ["CVE-2022-48716"]
-
 [basic]
-title = "Linux Kernel ASoC wcd938x 音频编解码器端口ID越界访问漏洞"
-description = "Linux内核ASoC子系统中wcd938x音频编解码器驱动存在错误使用portid的漏洞。混音器控件将通道ID存储在mixer->reg中，但该值与实际端口ID不同，端口ID应从chan_info数组派生。攻击者可利用此漏洞通过使用通道ID代替端口ID越界访问port_map数组，从而破坏wcd938x_sdw_priv结构体，导致内核内存损坏或拒绝服务。该漏洞影响搭载受影响内核版本的Qualcomm音频设备。"
-severity = "CRITICAL"
-score = 9.8
-cvss_v3 = "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
-published = "2024-06-20"
-updated = "2025-04-01"
-sources = ["nvd", "msrc", "redhat", "debian"]
-remediation = "升级Linux内核至5.17-rc3或更高版本，该版本包含commit c5c1546a654f613e291a7c5d6f3660fc1eb6d0c7的修复补丁。Debian用户可通过apt升级到修复版本（bullseye 5.10.251-5、bookworm 6.1.172-1、trixie 6.12.88-1）。"
-
-[affected]
-vendor = "Linux Kernel"
-product = "wcd938x ASoC Codec Driver"
+description = ""
+published = ""
+remediation = "Refer to vendor advisory and upgrade to fixed version."
+score = 0.0
+severity = "UNKNOWN"
+sources = ["msrc"]
+title = "CVE-2022-48716"
+updated = ""
 
 [exploit]
-poc_urls = []
 exp_urls = []
+poc_urls = []
 
-[nuclei_templates]
-
-[references]
-urls = [
-    "https://nvd.nist.gov/vuln/detail/CVE-2022-48716",
-    "https://osv.dev/vulnerability/CVE-2022-48716",
-    "https://www.tenable.com/cve/CVE-2022-48716",
-    "https://bugzilla.redhat.com/show_bug.cgi?id=2293286",
-    "https://security-tracker.debian.org/tracker/CVE-2022-48716",
-    "https://git.kernel.org/linus/c5c1546a654f613e291a7c5d6f3660fc1eb6d0c7"
-]
+[id]
+aliases = ["CVE-2022-48716"]
+ave_id = "AVE-2022-0003"
+cve_id = "CVE-2022-48716"
 
 [meta]
 collected_at = "2026-07-11T00:08:57.158614382+00:00"
 status = "completed"
+
+[references]
+urls = []