Riskcovery

CVE-2022-49387

watchdog: rzg2l_wdt: Fix 32bit overflow issue

State
Published
Severity
5.5 Medium
Published
Feb 26, 2025
Updated
May 11, 2026
Reserved
Feb 26, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

watchdog: rzg2l_wdt: Fix 32bit overflow issue

The value of timer_cycle_us can be 0 due to 32bit overflow. For eg:- If we assign the counter value "0xfff" for computing maxval.

This patch fixes this issue by appending ULL to 1024, so that it is promoted to 64bit.

This patch also fixes the warning message, 'watchdog: Invalid min and max timeout values, resetting to 0!'.

Scores

CVSSScoreVectorSource
3.15.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HCISA-ADP

Weaknesses

  • CWE-190 Integer Overflow or Wraparound

Affected Products

ProductVersions
LinuxLinux
  • 2cbc5cd0b55fa2310cc557c77b0665f5e00272de to before e07b9fa0dc32b492de85528caaf9f0c605d8424fAffected
  • 2cbc5cd0b55fa2310cc557c77b0665f5e00272de to before b95a47667d34e76c2c9013f8e3b1e5039a5a0b76Affected
  • 2cbc5cd0b55fa2310cc557c77b0665f5e00272de to before ea2949df22a533cdf75e4583c00b1ce94cd5a83bAffected
LinuxLinux
  • 5.17Affected
  • before 5.17Not affected
  • 5.17.15 through 5.17.*Not affected
  • 5.18.4 through 5.18.*Not affected
  • 5.19 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.