CVE-2022-48657

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

arm64: topology: fix possible overflow in amu_fie_setup()

cpufreq_get_hw_max_freq() returns max frequency in kHz as *unsigned int*, while freq_inv_set_max_ratio() gets passed this frequency in Hz as 'u64'. Multiplying max frequency by 1000 can potentially result in overflow -- multiplying by 1000ULL instead should avoid that...

Found by Linux Verification Center (linuxtesting.org) with the SVACE static analysis tool.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-120

Affected software

VendorProductVersions
LinuxLinux>= cd0ed03a8903a0b0c6fc36e32d133d1ddfe70cd6, < 904f881b57360cf85de962d84d8614d94431f60e; >= cd0ed03a8903a0b0c6fc36e32d133d1ddfe70cd6, < 3c3edb82d67b2be9231174ac2af4af60d4af7549; >= cd0ed03a8903a0b0c6fc36e32d133d1ddfe70cd6, < bb6d99e27cbe6b30e4e3bbd32927fd3b0bdec6eb; >= cd0ed03a8903a0b0c6fc36e32d133d1ddfe70cd6, < d4955c0ad77dbc684fc716387070ac24801b8bca
LinuxLinux5.7

References

Timeline

Published
Apr 28, 2024
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-486587.8In the Linux kernel, the following vulnerability has been resolved: mm: slub: fix flush_cpu_slab()/__free_slab() invocations in task contexCVE-2022-486595.5In the Linux kernel, the following vulnerability has been resolved: mm/slub: fix to return errno if kmalloc() fails In create_unique_id(),CVE-2022-48669.0Cross-site Scripting (XSS) - Stored in GitHub repository usememos/memos prior to 0.9.1.CVE-2022-486605.5In the Linux kernel, the following vulnerability has been resolved: gpiolib: cdev: Set lineevent_state::irq after IRQ register successfullyCVE-2022-486615.5In the Linux kernel, the following vulnerability has been resolved: gpio: mockup: Fix potential resource leakage when register a chip If cCVE-2022-486627.8In the Linux kernel, the following vulnerability has been resolved: drm/i915/gem: Really move i915_gem_context.link under ref protection iCVE-2022-486635.5In the Linux kernel, the following vulnerability has been resolved: gpio: mockup: fix NULL pointer dereference when removing debugfs We noCVE-2022-486645.5In the Linux kernel, the following vulnerability has been resolved: btrfs: fix hang during unmount when stopping a space reclaim worker OfCVE-2022-486655.5In the Linux kernel, the following vulnerability has been resolved: exfat: fix overflow for large capacity partition Using int type for seCVE-2022-486669.8In the Linux kernel, the following vulnerability has been resolved: scsi: core: Fix a use-after-free There are two .exit_cmd_priv implemenCVE-2022-486673.3In the Linux kernel, the following vulnerability has been resolved: smb3: fix temporary data corruption in insert range insert range doesnCVE-2022-486683.3In the Linux kernel, the following vulnerability has been resolved: smb3: fix temporary data corruption in collapse range collapse range d
CVE-2022-48657: High severity, CVSS 7.8 | Vulnix