Riskcovery

CVE-2022-48657

arm64: topology: fix possible overflow in amu_fie_setup()

State
Published
Severity
Not scored
Published
Apr 28, 2024
Updated
May 11, 2026
Reserved
Feb 25, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

arm64: topology: fix possible overflow in amu_fie_setup()

cpufreq_get_hw_max_freq() returns max frequency in kHz as *unsigned int*, while freq_inv_set_max_ratio() gets passed this frequency in Hz as 'u64'. Multiplying max frequency by 1000 can potentially result in overflow -- multiplying by 1000ULL instead should avoid that...

Found by Linux Verification Center (linuxtesting.org) with the SVACE static analysis tool.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • cd0ed03a8903a0b0c6fc36e32d133d1ddfe70cd6 to before 904f881b57360cf85de962d84d8614d94431f60eAffected
  • cd0ed03a8903a0b0c6fc36e32d133d1ddfe70cd6 to before 3c3edb82d67b2be9231174ac2af4af60d4af7549Affected
  • cd0ed03a8903a0b0c6fc36e32d133d1ddfe70cd6 to before bb6d99e27cbe6b30e4e3bbd32927fd3b0bdec6ebAffected
  • cd0ed03a8903a0b0c6fc36e32d133d1ddfe70cd6 to before d4955c0ad77dbc684fc716387070ac24801b8bcaAffected
LinuxLinux
  • 5.7Affected
  • before 5.7Not affected
  • 5.10.150 through 5.10.*Not affected
  • 5.15.71 through 5.15.*Not affected
  • 5.19.12 through 5.19.*Not affected
  • 6.0 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.