CVE-2022-3170

An out-of-bounds access issue was found in the Linux kernel sound subsystem. It could occur when the 'id->name' provided by the user did not end with '\0'. A privileged local user could pass a specially crafted name through ioctl() interface and crash the system or potentially escalate their privileges on the system.

• CWE-125
• CWE-125

• https://github.com/torvalds/linux/commit/5934d9a0383619c14df91af8fd76261dc3de2f5fPatch, Third Party Advisory
• https://github.com/torvalds/linux/commit/6ab55ec0a938c7f943a4edba3d6514f775983887Patch, Third Party Advisory
• https://github.com/torvalds/linux/commit/5934d9a0383619c14df91af8fd76261dc3de2f5fPatch, Third Party Advisory
• https://github.com/torvalds/linux/commit/6ab55ec0a938c7f943a4edba3d6514f775983887Patch, Third Party Advisory

Published

Sep 13, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-31693VMware Tools for Windows (12.x.y prior to 12.1.5, 11.x.y and…5.5
• CVE-2022-31694InstallBuilder Qt installers built with versions previous to…7.3
• CVE-2022-31696VMware ESXi contains a memory corruption vulnerability that …8.8
• CVE-2022-31697The vCenter Server contains an information disclosure vulner…5.5
• CVE-2022-31698The vCenter Server contains a denial-of-service vulnerabilit…5.3
• CVE-2022-31699VMware ESXi contains a heap-overflow vulnerability. A malici…3.3
• CVE-2022-31700VMware Workspace ONE Access and Identity Manager contain an …7.2
• CVE-2022-31701VMware Workspace ONE Access and Identity Manager contain a b…5.3
• CVE-2022-31702vRealize Network Insight (vRNI) contains a command injection…9.8
• CVE-2022-31703The vRealize Log Insight contains a Directory Traversal Vuln…7.5
• CVE-2022-31704The vRealize Log Insight contains a broken access control vu…9.8
• CVE-2022-31705VMware ESXi, Workstation, and Fusion contain a heap out-of-b…8.2