Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2023-52683

ACPI: LPIT: Avoid u32 multiplication overflow

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: ACPI: LPIT: Avoid u32 multiplication overflow In lpit_update_residency() there is a possibility of overflow in multiplication, if tsc_khz is large enough (> UINT_MAX/1000). Change multiplication to mul_u32_u32(). Found by Linux Verification Center (linuxtesting.org) with SVACE.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • eeb2d80d502af28e5660ff4bbe00f90ceb82c2db to < 647d1d50c31e60ef9ccb9756a8fdf863329f7aeeaffected
  • eeb2d80d502af28e5660ff4bbe00f90ceb82c2db to < 6c38e791bde07d6ca2a0a619ff9b6837e0d5f9adaffected
  • eeb2d80d502af28e5660ff4bbe00f90ceb82c2db to < f39c3d578c7d09a18ceaf56750fc7f20b02ada63affected
  • eeb2d80d502af28e5660ff4bbe00f90ceb82c2db to < c1814a4ffd016ce5392c6767d22ef3aa2f0d4bd1affected
  • eeb2d80d502af28e5660ff4bbe00f90ceb82c2db to < 72222dfd76a79d9666ab3117fcdd44ca8cd0c4deaffected
  • eeb2d80d502af28e5660ff4bbe00f90ceb82c2db to < d1ac288b2742aa4af746c5613bac71760fadd1c4affected
  • eeb2d80d502af28e5660ff4bbe00f90ceb82c2db to < b7aab9d906e2e252a7783f872406033ec49b6daeaffected
  • eeb2d80d502af28e5660ff4bbe00f90ceb82c2db to < 56d2eeda87995245300836ee4dbd13b002311782affected

Linux Linux

Default version status: affected

  • 4.15affected
  • 0 to < 4.15unaffected
  • 4.19.306 to ≤ 4.19.*unaffected
  • 5.4.268 to ≤ 5.4.*unaffected
  • 5.10.209 to ≤ 5.10.*unaffected
  • 5.15.148 to ≤ 5.15.*unaffected
  • 6.1.75 to ≤ 6.1.*unaffected
  • 6.6.14 to ≤ 6.6.*unaffected
  • 6.7.2 to ≤ 6.7.*unaffected
  • 6.8 to ≤ *unaffected

References