Skip to content
CVE PROGRAM SOURCE RECORD8.4 High

CVE-2022-49451

firmware: arm_scmi: Fix list protocols enumeration in the base protocol

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: firmware: arm_scmi: Fix list protocols enumeration in the base protocol While enumerating protocols implemented by the SCMI platform using BASE_DISCOVER_LIST_PROTOCOLS, the number of returned protocols is currently validated in an improper way since the check employs a sum between unsigned integers that could overflow and cause the check itself to be silently bypassed if the returned value 'loop_num_ret' is big enough. Fix the validation avoiding the addition.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • b6f20ff8bd94ad34032804a60bab5ee56752007e to < 444a2d27fe9867d0da4b28fc45b793f32e099ab8affected
  • b6f20ff8bd94ad34032804a60bab5ee56752007e to < b0e4bafac8963c2d85ee18d3d01f393735acceecaffected
  • b6f20ff8bd94ad34032804a60bab5ee56752007e to < 1052f22e127d0c34c3387bb389424ba1c61491ffaffected
  • b6f20ff8bd94ad34032804a60bab5ee56752007e to < 98342148a8cd242855d7e257f298c966c96dba9faffected
  • b6f20ff8bd94ad34032804a60bab5ee56752007e to < 6e7978695f4a6cbd83616b5a702b77fa2087b247affected
  • b6f20ff8bd94ad34032804a60bab5ee56752007e to < 2ccfcd7a09c826516edcfe464b05071961aada3faffected
  • b6f20ff8bd94ad34032804a60bab5ee56752007e to < 8009120e0354a67068e920eb10dce532391361d0affected

Linux Linux

Default version status: affected

  • 4.17affected
  • 0 to < 4.17unaffected
  • 4.19.247 to ≤ 4.19.*unaffected
  • 5.4.198 to ≤ 5.4.*unaffected
  • 5.10.121 to ≤ 5.10.*unaffected
  • 5.15.46 to ≤ 5.15.*unaffected
  • 5.17.14 to ≤ 5.17.*unaffected
  • 5.18.3 to ≤ 5.18.*unaffected
  • 5.19 to ≤ *unaffected

References