CVE-2022-49451: firmware: arm_scmi: Fix list protocols enumeration in the base protocol
In the Linux kernel, the following vulnerability has been resolved:
firmware: armscmi: Fix list protocols enumeration in the base protocol
While enumerating protocols implemented by the SCMI platform using BASEDISCOVERLISTPROTOCOLS, the number of returned protocols is currently validated in an improper way since the check employs a sum between unsigned integers that could overflow and cause the check itself to be silently bypassed if the returned value 'loopnumret' is big enough.
Fix the validation avoiding the addition.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2022-49451?
CVE-2022-49451 is classified as a vulnerability in the Linux kernel related to firmware enumeration.
How do I fix CVE-2022-49451?
To fix CVE-2022-49451, upgrade your Linux kernel to a version that addresses this vulnerability.
What versions of the Linux kernel are affected by CVE-2022-49451?
CVE-2022-49451 affects multiple versions of the Linux kernel, specifically between versions 4.17 and 5.18.3.
What functionality is impacted by CVE-2022-49451?
CVE-2022-49451 impacts the enumeration of protocols implemented by the SCMI platform using BASE_DISCOVER_LIST_PROTOCOLS.
Is there a patch available for CVE-2022-49451?
Yes, patches for CVE-2022-49451 are included in the updated versions of the Linux kernel.