In the Linux kernel, the following vulnerability has been resolved:
arm64: topology: fix possible overflow in amufiesetup()
cpufreqgethwmaxfreq() returns max frequency in kHz as unsigned int, while freqinvsetmaxratio() gets passed this frequency in Hz as 'u64'. Multiplying max frequency by 1000 can potentially result in overflow -- multiplying by 1000ULL instead should avoid that...
Found by Linux Verification Center (linuxtesting.org) with the SVACE static analysis tool.
[
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d4955c0ad77dbc684fc716387070ac24801b8bca",
"id": "CVE-2022-48657-03d19c51",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "arch/arm64/kernel/topology.c"
},
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"264570681500214006123830943889300400522",
"142130516965792801239063357612202311714",
"322659625056817437531240528859694093481",
"2248590319232497426480986981520420383"
]
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3c3edb82d67b2be9231174ac2af4af60d4af7549",
"id": "CVE-2022-48657-2b9949b8",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "arch/arm64/kernel/topology.c"
},
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"264570681500214006123830943889300400522",
"142130516965792801239063357612202311714",
"322659625056817437531240528859694093481",
"2248590319232497426480986981520420383"
]
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@bb6d99e27cbe6b30e4e3bbd32927fd3b0bdec6eb",
"id": "CVE-2022-48657-2eb30fe9",
"deprecated": false,
"signature_version": "v1",
"target": {
"function": "amu_fie_setup",
"file": "arch/arm64/kernel/topology.c"
},
"signature_type": "Function",
"digest": {
"length": 426.0,
"function_hash": "174738007689955348979598964596584372665"
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@904f881b57360cf85de962d84d8614d94431f60e",
"id": "CVE-2022-48657-3fb81c96",
"deprecated": false,
"signature_version": "v1",
"target": {
"function": "validate_cpu_freq_invariance_counters",
"file": "arch/arm64/kernel/topology.c"
},
"signature_type": "Function",
"digest": {
"length": 779.0,
"function_hash": "157965559674295013497000154638660354145"
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@904f881b57360cf85de962d84d8614d94431f60e",
"id": "CVE-2022-48657-7063a57a",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "arch/arm64/kernel/topology.c"
},
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"43257082215048246124553650583568881625",
"3076512716759947259365711978783842292",
"217290004515216326389963546967899529618",
"173666035939663504683196605842649749513"
]
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@bb6d99e27cbe6b30e4e3bbd32927fd3b0bdec6eb",
"id": "CVE-2022-48657-b3f90d81",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "arch/arm64/kernel/topology.c"
},
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"264570681500214006123830943889300400522",
"142130516965792801239063357612202311714",
"322659625056817437531240528859694093481",
"2248590319232497426480986981520420383"
]
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d4955c0ad77dbc684fc716387070ac24801b8bca",
"id": "CVE-2022-48657-b86a2adc",
"deprecated": false,
"signature_version": "v1",
"target": {
"function": "amu_fie_setup",
"file": "arch/arm64/kernel/topology.c"
},
"signature_type": "Function",
"digest": {
"length": 426.0,
"function_hash": "174738007689955348979598964596584372665"
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3c3edb82d67b2be9231174ac2af4af60d4af7549",
"id": "CVE-2022-48657-c9bd330c",
"deprecated": false,
"signature_version": "v1",
"target": {
"function": "amu_fie_setup",
"file": "arch/arm64/kernel/topology.c"
},
"signature_type": "Function",
"digest": {
"length": 426.0,
"function_hash": "174738007689955348979598964596584372665"
}
}
]