Riskcovery

CVE-2022-49946

clk: bcm: rpi: Prevent out-of-bounds access

State
Published
Severity
Not scored
Published
Jun 18, 2025
Updated
May 11, 2026
Reserved
Jun 18, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

clk: bcm: rpi: Prevent out-of-bounds access

The while loop in raspberrypi_discover_clocks() relies on the assumption that the id of the last clock element is zero. Because this data comes from the Videocore firmware and it doesn't guarantuee such a behavior this could lead to out-of-bounds access. So fix this by providing a sentinel element.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 93d2725affd65686792f4b57e49ef660f3c8c0f9 to before fcae47b2d23c81603b01f56cf8db63ed64599d34Affected
  • 93d2725affd65686792f4b57e49ef660f3c8c0f9 to before ff0b144d4b0a9fbd6efe4d2c0a4b6c9bae2138d2Affected
  • 93d2725affd65686792f4b57e49ef660f3c8c0f9 to before c8b04b731d43366824841ebdca4ac715f95e0ea4Affected
  • 93d2725affd65686792f4b57e49ef660f3c8c0f9 to before bc163555603e4ae9c817675ad80d618a4cdbfa2dAffected
LinuxLinux
  • 5.9Affected
  • before 5.9Not affected
  • 5.10.142 through 5.10.*Not affected
  • 5.15.66 through 5.15.*Not affected
  • 5.19.8 through 5.19.*Not affected
  • 6.0 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.