CVE-2022-48657
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
28/04/2024
Last modified:
29/04/2024
Description
In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
arm64: topology: fix possible overflow in amu_fie_setup()<br />
<br />
cpufreq_get_hw_max_freq() returns max frequency in kHz as *unsigned int*,<br />
while freq_inv_set_max_ratio() gets passed this frequency in Hz as &#39;u64&#39;.<br />
Multiplying max frequency by 1000 can potentially result in overflow --<br />
multiplying by 1000ULL instead should avoid that...<br />
<br />
Found by Linux Verification Center (linuxtesting.org) with the SVACE static<br />
analysis tool.



