In the Linux kernel, the following vulnerability has been resolved:
arm64: topology: fix possible overflow in amu_fie_setup()
cpufreq_get_hw_max_freq() returns max frequency in kHz as *unsigned int*, while freq_inv_set_max_ratio() gets passed this frequency in Hz as 'u64'. Multiplying max frequency by 1000 can potentially result in overflow -- multiplying by 1000ULL instead should avoid that...
Found by Linux Verification Center (linuxtesting.org) with the SVACE static analysis tool.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade bpftoolUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-develUpgrade python-perf-debuginfoUpgrade kernelUpgrade kernel-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-livepatch-5.15.73-48.135Upgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-5.10.155-138.670Upgrade kernel-toolsUpgrade bpftool-debuginfoUpgrade perf-debuginfoUpgrade kernel-develUpgrade python-perfUpgrade perf | Aug 2, 2024 | Apr 28, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Apr 28, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Apr 28, 2024 |
| Suse | — | Upgrade dtb-armUpgrade gfs2-kmp-64kbUpgrade kernel-zfcpdumpUpgrade dtb-mediatekUpgrade gfs2-kmp-azureUpgrade kernel-debug-develUpgrade dtb-caviumUpgrade kernel-rt-livepatchUpgrade ocfs2-kmp-rtUpgrade kernel-64kb-livepatch-develUpgrade ocfs2-kmp-azureUpgrade dtb-allwinnerUpgrade kernel-64kb-develUpgrade kernel-devel-rtUpgrade kernel-64kbUpgrade kselftests-kmp-64kbUpgrade kernel-symsUpgrade dtb-renesasUpgrade kernel-debugUpgrade kernel-default-vdsoUpgrade kernel-azure-optionalUpgrade kernel-kvmsmall-develUpgrade dtb-amazonUpgrade kernel-develUpgrade dtb-xilinxUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-amdUpgrade kernel-default-develUpgrade reiserfs-kmp-defaultUpgrade cluster-md-kmp-rtUpgrade gfs2-kmp-defaultUpgrade dlm-kmp-64kbUpgrade kernel-default-optionalUpgrade kernel-default-baseUpgrade dlm-kmp-rtUpgrade dtb-exynosUpgrade reiserfs-kmp-azureUpgrade dtb-alteraUpgrade kernel-64kb-optionalUpgrade dtb-apmUpgrade kernel-default-livepatch-develUpgrade cluster-md-kmp-azureUpgrade kernel-rt-develUpgrade ocfs2-kmp-defaultUpgrade kernel-64kb-extraUpgrade dtb-hisiliconUpgrade kernel-docs-htmlUpgrade gfs2-kmp-rtUpgrade dtb-sprdUpgrade kernel-source-azureUpgrade cluster-md-kmp-64kbUpgrade kernel-sourceUpgrade kernel-rt_debugUpgrade kernel-source-vanillaUpgrade kernel-rt-optionalUpgrade reiserfs-kmp-64kbUpgrade dlm-kmp-defaultUpgrade kernel-rt_debug-vdsoUpgrade kernel-rt-extraUpgrade kernel-obs-qaUpgrade kernel-default-livepatchUpgrade kernel-debug-vdsoUpgrade dtb-rockchipUpgrade dlm-kmp-azureUpgrade dtb-freescaleUpgrade kernel-obs-buildUpgrade kernel-azure-vdsoUpgrade dtb-nvidiaUpgrade kernel-devel-azureUpgrade kernel-rtUpgrade kernel-defaultUpgrade kernel-kvmsmall-vdsoUpgrade kernel-docsUpgrade dtb-appleUpgrade kernel-debug-livepatch-develUpgrade kernel-rt-vdsoUpgrade kernel-syms-azureUpgrade ocfs2-kmp-64kbUpgrade kernel-azure-livepatch-develUpgrade kernel-default-extraUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-source-rtUpgrade kselftests-kmp-defaultUpgrade cluster-md-kmp-defaultUpgrade kernel-rt-livepatch-develUpgrade dtb-marvellUpgrade dtb-amlogicUpgrade kernel-default-base-rebuildUpgrade kernel-kvmsmallUpgrade dtb-broadcomUpgrade reiserfs-kmp-rtUpgrade kernel-syms-rtUpgrade kernel-macrosUpgrade dtb-socionextUpgrade dtb-qcomUpgrade kernel-azure-extraUpgrade kselftests-kmp-azureUpgrade kernel-azureUpgrade dtb-lgUpgrade kselftests-kmp-rtUpgrade kernel-rt_debug-develUpgrade kernel-azure-devel | Aug 9, 2024 | Apr 28, 2024 |
| Ubuntu | — | Upgrade linux-aws-5.15Upgrade linux-gkeUpgrade linux-awsUpgrade linux-gcpUpgrade linuxUpgrade linux-lowlatencyUpgrade linux-nvidiaUpgrade linux-intel-iotgUpgrade linux-azure-fdeUpgrade linux-gkeop-5.15Upgrade linux-lowlatency-hwe-5.15Upgrade linux-raspiUpgrade linux-azure-5.15Upgrade linux-realtimeUpgrade linux-gcp-5.15Upgrade linux-intel-iotg-5.15Upgrade linux-gkeopUpgrade linux-ibmUpgrade linux-hwe-5.15Upgrade linux-azureUpgrade linux-oracle-5.15Upgrade linux-azure-fde-5.15Upgrade linux-riscv-5.15Upgrade linux-oracleUpgrade linux-kvm | Nov 19, 2024 | Apr 28, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 28, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub