CVE-2022-48657

Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
28/04/2024
Last modified:
29/04/2024

Description

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> arm64: topology: fix possible overflow in amu_fie_setup()<br /> <br /> cpufreq_get_hw_max_freq() returns max frequency in kHz as *unsigned int*,<br /> while freq_inv_set_max_ratio() gets passed this frequency in Hz as &amp;#39;u64&amp;#39;.<br /> Multiplying max frequency by 1000 can potentially result in overflow --<br /> multiplying by 1000ULL instead should avoid that...<br /> <br /> Found by Linux Verification Center (linuxtesting.org) with the SVACE static<br /> analysis tool.

Impact