CVE-2023-52683

ACPI: LPIT: Avoid u32 multiplication overflow

State: Published
Severity: Not scored
Published: May 17, 2024
Updated: May 11, 2026
Reserved: Mar 7, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

ACPI: LPIT: Avoid u32 multiplication overflow

In lpit_update_residency() there is a possibility of overflow in multiplication, if tsc_khz is large enough (> UINT_MAX/1000).

Change multiplication to mul_u32_u32().

Found by Linux Verification Center (linuxtesting.org) with SVACE.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	eeb2d80d502af28e5660ff4bbe00f90ceb82c2db to before 647d1d50c31e60ef9ccb9756a8fdf863329f7aeeAffected eeb2d80d502af28e5660ff4bbe00f90ceb82c2db to before 6c38e791bde07d6ca2a0a619ff9b6837e0d5f9adAffected eeb2d80d502af28e5660ff4bbe00f90ceb82c2db to before f39c3d578c7d09a18ceaf56750fc7f20b02ada63Affected eeb2d80d502af28e5660ff4bbe00f90ceb82c2db to before c1814a4ffd016ce5392c6767d22ef3aa2f0d4bd1Affected eeb2d80d502af28e5660ff4bbe00f90ceb82c2db to before 72222dfd76a79d9666ab3117fcdd44ca8cd0c4deAffected eeb2d80d502af28e5660ff4bbe00f90ceb82c2db to before d1ac288b2742aa4af746c5613bac71760fadd1c4Affected eeb2d80d502af28e5660ff4bbe00f90ceb82c2db to before b7aab9d906e2e252a7783f872406033ec49b6daeAffected eeb2d80d502af28e5660ff4bbe00f90ceb82c2db to before 56d2eeda87995245300836ee4dbd13b002311782Affected
LinuxLinux	4.15Affected before 4.15Not affected 4.19.306 through 4.19.Not affected 5.4.268 through 5.4.Not affected 5.10.209 through 5.10.Not affected 5.15.148 through 5.15.Not affected 6.1.75 through 6.1.Not affected 6.6.14 through 6.6.Not affected 6.7.2 through 6.7.*Not affected 6.8 and laterNot affected

Product

Versions

LinuxLinux

eeb2d80d502af28e5660ff4bbe00f90ceb82c2db to before 647d1d50c31e60ef9ccb9756a8fdf863329f7aeeAffected
eeb2d80d502af28e5660ff4bbe00f90ceb82c2db to before 6c38e791bde07d6ca2a0a619ff9b6837e0d5f9adAffected
eeb2d80d502af28e5660ff4bbe00f90ceb82c2db to before f39c3d578c7d09a18ceaf56750fc7f20b02ada63Affected
eeb2d80d502af28e5660ff4bbe00f90ceb82c2db to before c1814a4ffd016ce5392c6767d22ef3aa2f0d4bd1Affected
eeb2d80d502af28e5660ff4bbe00f90ceb82c2db to before 72222dfd76a79d9666ab3117fcdd44ca8cd0c4deAffected
eeb2d80d502af28e5660ff4bbe00f90ceb82c2db to before d1ac288b2742aa4af746c5613bac71760fadd1c4Affected
eeb2d80d502af28e5660ff4bbe00f90ceb82c2db to before b7aab9d906e2e252a7783f872406033ec49b6daeAffected
eeb2d80d502af28e5660ff4bbe00f90ceb82c2db to before 56d2eeda87995245300836ee4dbd13b002311782Affected

LinuxLinux

4.15Affected
before 4.15Not affected
4.19.306 through 4.19.*Not affected
5.4.268 through 5.4.*Not affected
5.10.209 through 5.10.*Not affected
5.15.148 through 5.15.*Not affected
6.1.75 through 6.1.*Not affected
6.6.14 through 6.6.*Not affected
6.7.2 through 6.7.*Not affected
6.8 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.