CVE-2022-49387

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2022-49387
In the Linux kernel, the following vulnerability has been resolved: watchdog: rzg2l_wdt: Fix 32bit overflow issue The value of timer_cycle_us can be 0 due to 32bit overflow. For eg:- If we assign the counter value "0xfff" for computing maxval. This patch fixes this issue by appending ULL to 1024, so that it is promoted to 64bit. This patch also fixes the warning message, 'watchdog: Invalid min and max timeout values, resetting to 0!'.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/b95a47667d34e76c2c9013f8e3b1e5039a5a0b76 Patch
https://git.kernel.org/stable/c/e07b9fa0dc32b492de85528caaf9f0c605d8424f Patch
https://git.kernel.org/stable/c/ea2949df22a533cdf75e4583c00b1ce94cd5a83b Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

17 Apr 2025, 20:46

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
CWE CWE-190
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: watchdog: rzg2l_wdt: soluciona el problema de desbordamiento de 32 bits El valor de timer_cycle_us puede ser 0 debido al desbordamiento de 32 bits. Por ejemplo: si asignamos el valor del contador "0xfff" para calcular maxval. Este parche soluciona este problema añadiendo ULL a 1024, de modo que se promueva a 64 bits. Este parche también soluciona el mensaje de advertencia, 'watchdog: Invalid min and max timeout values, resetting to 0!'.
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
First Time Linux linux Kernel
Linux
References () https://git.kernel.org/stable/c/b95a47667d34e76c2c9013f8e3b1e5039a5a0b76 - () https://git.kernel.org/stable/c/b95a47667d34e76c2c9013f8e3b1e5039a5a0b76 - Patch
References () https://git.kernel.org/stable/c/e07b9fa0dc32b492de85528caaf9f0c605d8424f - () https://git.kernel.org/stable/c/e07b9fa0dc32b492de85528caaf9f0c605d8424f - Patch
References () https://git.kernel.org/stable/c/ea2949df22a533cdf75e4583c00b1ce94cd5a83b - () https://git.kernel.org/stable/c/ea2949df22a533cdf75e4583c00b1ce94cd5a83b - Patch

26 Feb 2025, 07:01

Type Values Removed Values Added
New CVE
Information

Published : 2025-02-26 07:01

Updated : 2025-04-17 20:46

NVD link : CVE-2022-49387

Mitre link : CVE-2022-49387

CVE.ORG link : CVE-2022-49387

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-190

Integer Overflow or Wraparound