CVE-2022-49749

Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
27/03/2025
Last modified:
28/03/2025

Description

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> i2c: designware: use casting of u64 in clock multiplication to avoid overflow<br /> <br /> In functions i2c_dw_scl_lcnt() and i2c_dw_scl_hcnt() may have overflow<br /> by depending on the values of the given parameters including the ic_clk.<br /> For example in our use case where ic_clk is larger than one million,<br /> multiplication of ic_clk * 4700 will result in 32 bit overflow.<br /> <br /> Add cast of u64 to the calculation to avoid multiplication overflow, and<br /> use the corresponding define for divide.

Impact