Riskcovery

CVE-2022-48655

firmware: arm_scmi: Harden accesses to the reset domains

State
Published
Severity
8.1 High
Published
Apr 28, 2024
Updated
May 11, 2026
Reserved
Feb 25, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

firmware: arm_scmi: Harden accesses to the reset domains

Accessing reset domains descriptors by the index upon the SCMI drivers requests through the SCMI reset operations interface can potentially lead to out-of-bound violations if the SCMI driver misbehave.

Add an internal consistency check before any such domains descriptors accesses.

Scores

CVSSScoreVectorSource
3.18.1 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:HCISA-ADP

Weaknesses

Affected Products

ProductVersions
LinuxLinux
  • 95a15d80aa0de938299acfcbc6aa6f2b16f5d7e5 to before 7184491fc515f391afba23d0e9b690caaea72dafAffected
  • 95a15d80aa0de938299acfcbc6aa6f2b16f5d7e5 to before f2277d9e2a0d092c13bae7ee82d75432bb8b5108Affected
  • 95a15d80aa0de938299acfcbc6aa6f2b16f5d7e5 to before 1f08a1b26cfc53b7715abc46857c6023bb1b87deAffected
  • 95a15d80aa0de938299acfcbc6aa6f2b16f5d7e5 to before 8e65edf0d37698f7a6cb174608d3ec7976baf49eAffected
  • 95a15d80aa0de938299acfcbc6aa6f2b16f5d7e5 to before e9076ffbcaed5da6c182b144ef9f6e24554af268Affected
LinuxLinux
  • 5.4Affected
  • before 5.4Not affected
  • 5.4.277 through 5.4.*Not affected
  • 5.10.218 through 5.10.*Not affected
  • 5.15.71 through 5.15.*Not affected
  • 5.19.12 through 5.19.*Not affected
  • 6.0 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.