In the Linux kernel, the following vulnerability has been resolved:
arm64: topology: fix possible overflow in amu_fie_setup()
cpufreq_get_hw_max_freq() returns max frequency in kHz as *unsigned int*, while freq_inv_set_max_ratio() gets passed this frequency in Hz as 'u64'. Multiplying max frequency by 1000 can potentially result in overflow -- multiplying by 1000ULL instead should avoid that...
Found by Linux Verification Center (linuxtesting.org) with the SVACE static analysis tool.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade bpftoolUpgrade kernel-tools-develUpgrade python-perf-debuginfoUpgrade kernel-headersUpgrade kernelUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade perf-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-toolsUpgrade perfUpgrade python-perfUpgrade kernel-develUpgrade kernel-livepatch-5.15.73-48.135Upgrade kernel-livepatch-5.10.155-138.670Upgrade kernel-debuginfo-common-aarch64 | Aug 2, 2024 | Apr 28, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Apr 28, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Apr 28, 2024 |
| Suse | — | Upgrade kernel-obs-buildUpgrade dtb-lgUpgrade kernel-azureUpgrade dtb-sprdUpgrade dtb-nvidiaUpgrade kernel-azure-develUpgrade kernel-rt_debug-vdsoUpgrade dlm-kmp-defaultUpgrade kernel-docs-htmlUpgrade dtb-freescaleUpgrade kernel-azure-extraUpgrade kernel-docsUpgrade kernel-rt_debug-develUpgrade ocfs2-kmp-64kbUpgrade kernel-azure-livepatch-develUpgrade kernel-debug-vdsoUpgrade reiserfs-kmp-64kbUpgrade dtb-qcomUpgrade kernel-source-azureUpgrade kselftests-kmp-rtUpgrade kernel-kvmsmall-vdsoUpgrade kernel-rt-extraUpgrade kernel-source-vanillaUpgrade dlm-kmp-azureUpgrade dtb-marvellUpgrade cluster-md-kmp-defaultUpgrade kernel-rtUpgrade kernel-syms-rtUpgrade kernel-devel-azureUpgrade dtb-socionextUpgrade kernel-sourceUpgrade dtb-amlogicUpgrade kernel-rt-optionalUpgrade kernel-defaultUpgrade kernel-rt-livepatch-develUpgrade dtb-rockchipUpgrade kernel-macrosUpgrade kernel-rt_debugUpgrade kernel-obs-qaUpgrade dtb-broadcomUpgrade reiserfs-kmp-rtUpgrade kernel-syms-azureUpgrade kselftests-kmp-azureUpgrade kernel-kvmsmallUpgrade kernel-default-base-rebuildUpgrade kernel-debug-livepatch-develUpgrade kernel-default-extraUpgrade dtb-appleUpgrade kernel-default-livepatchUpgrade kernel-azure-vdsoUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-rt-vdsoUpgrade kernel-source-rtUpgrade cluster-md-kmp-64kbUpgrade kselftests-kmp-defaultUpgrade gfs2-kmp-rtUpgrade kernel-develUpgrade kernel-debug-develUpgrade kernel-64kb-optionalUpgrade dtb-xilinxUpgrade dtb-renesasUpgrade dtb-amazonUpgrade kernel-symsUpgrade reiserfs-kmp-azureUpgrade kernel-rt_debug-livepatch-develUpgrade gfs2-kmp-defaultUpgrade cluster-md-kmp-rtUpgrade dtb-amdUpgrade dtb-exynosUpgrade dtb-armUpgrade ocfs2-kmp-rtUpgrade kernel-debugUpgrade dtb-mediatekUpgrade dtb-apmUpgrade kernel-azure-optionalUpgrade kernel-64kbUpgrade kernel-64kb-extraUpgrade dtb-caviumUpgrade dtb-hisiliconUpgrade cluster-md-kmp-azureUpgrade kernel-default-vdsoUpgrade kernel-default-develUpgrade dlm-kmp-64kbUpgrade kernel-zfcpdumpUpgrade gfs2-kmp-64kbUpgrade ocfs2-kmp-azureUpgrade kernel-64kb-livepatch-develUpgrade dlm-kmp-rtUpgrade reiserfs-kmp-defaultUpgrade dtb-allwinnerUpgrade kernel-rt-livepatchUpgrade kernel-64kb-develUpgrade gfs2-kmp-azureUpgrade kernel-devel-rtUpgrade ocfs2-kmp-defaultUpgrade kselftests-kmp-64kbUpgrade kernel-rt-develUpgrade kernel-default-optionalUpgrade kernel-default-livepatch-develUpgrade kernel-default-baseUpgrade dtb-alteraUpgrade kernel-kvmsmall-devel | Aug 9, 2024 | Apr 28, 2024 |
| Ubuntu | — | Upgrade linux-intel-iotgUpgrade linux-realtimeUpgrade linux-nvidiaUpgrade linux-azure-fde-5.15Upgrade linux-gkeop-5.15Upgrade linux-azureUpgrade linux-oracle-5.15Upgrade linux-intel-iotg-5.15Upgrade linux-azure-5.15Upgrade linux-azure-fdeUpgrade linux-ibmUpgrade linux-hwe-5.15Upgrade linux-riscv-5.15Upgrade linux-gcp-5.15Upgrade linux-oracleUpgrade linux-kvmUpgrade linux-raspiUpgrade linux-lowlatency-hwe-5.15Upgrade linux-gkeopUpgrade linux-awsUpgrade linux-lowlatencyUpgrade linuxUpgrade linux-gkeUpgrade linux-aws-5.15Upgrade linux-gcp | Nov 19, 2024 | Apr 28, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 28, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub