CVE-2022-49451

CVE-2022-49451 affects the Linux kernel firmware: arm_scmi, base protocol enumeration. The vulnerability stems from improper validation when enumerating SCMI protocols with BASE_DISCOVER_LIST_PROTOCOLS: the check used a sum of unsigned integers that could overflow, allowing bypass of the check if...

PT-2022-34825 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.71 Description: The issue concerns the arm scmi firmware in the Linux Kernel, where accesses to the reset domains need to be hardened. The actual impact and attack plausibility have not yet been proven...