CVE-2022-49749
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
27/03/2025
Last modified:
28/03/2025
Description
In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
i2c: designware: use casting of u64 in clock multiplication to avoid overflow<br />
<br />
In functions i2c_dw_scl_lcnt() and i2c_dw_scl_hcnt() may have overflow<br />
by depending on the values of the given parameters including the ic_clk.<br />
For example in our use case where ic_clk is larger than one million,<br />
multiplication of ic_clk * 4700 will result in 32 bit overflow.<br />
<br />
Add cast of u64 to the calculation to avoid multiplication overflow, and<br />
use the corresponding define for divide.