Description
In the Linux kernel, the following vulnerability has been resolved: arm64: topology: fix possible overflow in amu_fie_setup() cpufreq_get_hw_max_freq() returns max frequency in kHz as *unsigned int*, while freq_inv_set_max_ratio() gets passed this frequency in Hz as 'u64'. Multiplying max frequency by 1000 can potentially result in overflow -- multiplying by 1000ULL instead should avoid that... Found by Linux Verification Center (linuxtesting.org) with the SVACE static analysis tool.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
cd0ed03a8903a0b0c6fc36e32d133d1ddfe70cd6 to < 904f881b57360cf85de962d84d8614d94431f60eaffectedcd0ed03a8903a0b0c6fc36e32d133d1ddfe70cd6 to < 3c3edb82d67b2be9231174ac2af4af60d4af7549affectedcd0ed03a8903a0b0c6fc36e32d133d1ddfe70cd6 to < bb6d99e27cbe6b30e4e3bbd32927fd3b0bdec6ebaffectedcd0ed03a8903a0b0c6fc36e32d133d1ddfe70cd6 to < d4955c0ad77dbc684fc716387070ac24801b8bcaaffected
Linux Linux
Default version status: affected
5.7affected0 to < 5.7unaffected5.10.150 to ≤ 5.10.*unaffected5.15.71 to ≤ 5.15.*unaffected5.19.12 to ≤ 5.19.*unaffected6.0 to ≤ *unaffected