CVE-2022-48657

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is related to a possible overflow in the amu fie setup() function. The cpufreq get hw max freq() function returns the maximum frequency in kHz as an unsigned int, while the freq inv set max ratio() function gets passed this frequency in Hz as a u64. Multiplying the maximum frequency by 1000 can potentially result in an overflow. The Linux Verification Center found this issue using the SVACE static analysis tool.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.