Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2022-49186

clk: visconti: prevent array overflow in visconti_clk_register_gates()

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: clk: visconti: prevent array overflow in visconti_clk_register_gates() This code was using -1 to represent that there was no reset function. Unfortunately, the -1 was stored in u8 so the if (clks[i].rs_id >= 0) condition was always true. This lead to an out of bounds access in visconti_clk_register_gates().

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • b4cbe606dc3674b25cb661e7cd1a1c6ddaaafaaa to < 2723543c1d60278d5aef1c4ad732dbad24b84a81affected
  • b4cbe606dc3674b25cb661e7cd1a1c6ddaaafaaa to < c5601e0720ce1a3ad895f94a5838530edde01ed3affected

Linux Linux

Default version status: affected

  • 5.17affected
  • 0 to < 5.17unaffected
  • 5.17.2 to ≤ 5.17.*unaffected
  • 5.18 to ≤ *unaffected

References