In the Linux kernel, the following vulnerability has been resolved:
ACPI: LPIT: Avoid u32 multiplication overflow
In lpit_update_residency() there is a possibility of overflow
in multiplication, if tsc_khz is large enough (> UINT_MAX/1000).
Change multiplication to mul_u32_u32().
Found by Linux Verification Center (linuxtesting.org) with SVACE.
[
{
"product": "Linux",
"vendor": "Linux",
"defaultStatus": "unaffected",
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"programFiles": [
"drivers/acpi/acpi_lpit.c"
],
"versions": [
{
"version": "eeb2d80d502a",
"lessThan": "647d1d50c31e",
"status": "affected",
"versionType": "git"
},
{
"version": "eeb2d80d502a",
"lessThan": "6c38e791bde0",
"status": "affected",
"versionType": "git"
},
{
"version": "eeb2d80d502a",
"lessThan": "f39c3d578c7d",
"status": "affected",
"versionType": "git"
},
{
"version": "eeb2d80d502a",
"lessThan": "c1814a4ffd01",
"status": "affected",
"versionType": "git"
},
{
"version": "eeb2d80d502a",
"lessThan": "72222dfd76a7",
"status": "affected",
"versionType": "git"
},
{
"version": "eeb2d80d502a",
"lessThan": "d1ac288b2742",
"status": "affected",
"versionType": "git"
},
{
"version": "eeb2d80d502a",
"lessThan": "b7aab9d906e2",
"status": "affected",
"versionType": "git"
},
{
"version": "eeb2d80d502a",
"lessThan": "56d2eeda8799",
"status": "affected",
"versionType": "git"
}
]
},
{
"product": "Linux",
"vendor": "Linux",
"defaultStatus": "affected",
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"programFiles": [
"drivers/acpi/acpi_lpit.c"
],
"versions": [
{
"version": "4.15",
"status": "affected"
},
{
"version": "0",
"lessThan": "4.15",
"status": "unaffected",
"versionType": "custom"
},
{
"version": "4.19.306",
"lessThanOrEqual": "4.19.*",
"status": "unaffected",
"versionType": "custom"
},
{
"version": "5.4.268",
"lessThanOrEqual": "5.4.*",
"status": "unaffected",
"versionType": "custom"
},
{
"version": "5.10.209",
"lessThanOrEqual": "5.10.*",
"status": "unaffected",
"versionType": "custom"
},
{
"version": "5.15.148",
"lessThanOrEqual": "5.15.*",
"status": "unaffected",
"versionType": "custom"
},
{
"version": "6.1.75",
"lessThanOrEqual": "6.1.*",
"status": "unaffected",
"versionType": "custom"
},
{
"version": "6.6.14",
"lessThanOrEqual": "6.6.*",
"status": "unaffected",
"versionType": "custom"
},
{
"version": "6.7.2",
"lessThanOrEqual": "6.7.*",
"status": "unaffected",
"versionType": "custom"
},
{
"version": "6.8",
"lessThanOrEqual": "*",
"status": "unaffected",
"versionType": "original_commit_for_fix"
}
]
}
]
git.kernel.org/stable/c/56d2eeda87995245300836ee4dbd13b002311782
git.kernel.org/stable/c/647d1d50c31e60ef9ccb9756a8fdf863329f7aee
git.kernel.org/stable/c/6c38e791bde07d6ca2a0a619ff9b6837e0d5f9ad
git.kernel.org/stable/c/72222dfd76a79d9666ab3117fcdd44ca8cd0c4de
git.kernel.org/stable/c/b7aab9d906e2e252a7783f872406033ec49b6dae
git.kernel.org/stable/c/c1814a4ffd016ce5392c6767d22ef3aa2f0d4bd1
git.kernel.org/stable/c/d1ac288b2742aa4af746c5613bac71760fadd1c4
git.kernel.org/stable/c/f39c3d578c7d09a18ceaf56750fc7f20b02ada63
lists.debian.org/debian-lts-announce/2024/06/msg00016.html
lists.debian.org/debian-lts-announce/2024/06/msg00020.html