In the Linux kernel, the following vulnerability has been resolved:
arm64: topology: fix possible overflow in amu_fie_setup()
cpufreq_get_hw_max_freq() returns max frequency in kHz as *unsigned int*,
while freq_inv_set_max_ratio() gets passed this frequency in Hz as 'u64'.
Multiplying max frequency by 1000 can potentially result in overflow --
multiplying by 1000ULL instead should avoid that...
Found by Linux Verification Center (linuxtesting.org) with the SVACE static
analysis tool.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: Linux
Published: 2024-04-28T13:01:08.975Z
Updated: 2024-12-19T08:05:11.380Z
Reserved: 2024-02-25T13:44:28.317Z
Link: CVE-2022-48657
Vulnrichment
Updated: 2024-08-03T15:17:55.599Z
NVD
Status : Modified
Published: 2024-04-28T13:15:07.717
Modified: 2024-11-21T07:33:42.797
Link: CVE-2022-48657
Redhat