CVE-2022-49186
HIGHLinux kernel - Memory Corruption
Title source: llmDescription
In the Linux kernel, the following vulnerability has been resolved: clk: visconti: prevent array overflow in visconti_clk_register_gates() This code was using -1 to represent that there was no reset function. Unfortunately, the -1 was stored in u8 so the if (clks[i].rs_id >= 0) condition was always true. This lead to an out of bounds access in visconti_clk_register_gates().
Exploits (1)
Scores
CVSS v3
7.8
EPSS
0.0011
EPSS Percentile
28.9%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Details
CWE
CWE-129
Status
published
Products (2)
linux/Kernel
5.17.0 - 5.17.2linux
linux/linux_kernel
5.17 - 5.17.2
Published
Feb 26, 2025
Tracked Since
Feb 18, 2026