CVE-2022-49946

Katalog CVE

CVSS 7.1 · High EPSS 0,23%

Kerentanan Out-of-bounds Read pada linux kernel. Skor CVSS 3.1 7.1 (High) menurut NVD.

Deskripsi (NVD)

In the Linux kernel, the following vulnerability has been resolved: clk: bcm: rpi: Prevent out-of-bounds access The while loop in raspberrypi_discover_clocks() relies on the assumption that the id of the last clock element is zero. Because this data comes from the Videocore firmware and it doesn't guarantuee such a behavior this could lead to out-of-bounds access. So fix this by providing a sentinel element.

Rincian

Terbit di NVD

18 Juni 2025

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

7.1 (High), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-125: Out-of-bounds Read

EPSS (30 hari)

0,23% peluang dieksploitasi; lebih tinggi dari 12,9% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://git.kernel.org/stable/c/bc163555603e4ae9c817675ad80d618a4cdbfa2d patch
• https://git.kernel.org/stable/c/c8b04b731d43366824841ebdca4ac715f95e0ea4 patch
• https://git.kernel.org/stable/c/fcae47b2d23c81603b01f56cf8db63ed64599d34 patch
• https://git.kernel.org/stable/c/ff0b144d4b0a9fbd6efe4d2c0a4b6c9bae2138d2 patch