CVE - CVE-2022-49451

CVE-ID
CVE-2022-49451	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
In the Linux kernel, the following vulnerability has been resolved: firmware: arm_scmi: Fix list protocols enumeration in the base protocol While enumerating protocols implemented by the SCMI platform using BASE_DISCOVER_LIST_PROTOCOLS, the number of returned protocols is currently validated in an improper way since the check employs a sum between unsigned integers that could overflow and cause the check itself to be silently bypassed if the returned value 'loop_num_ret' is big enough. Fix the validation avoiding the addition.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:https://git.kernel.org/stable/c/1052f22e127d0c34c3387bb389424ba1c61491ff URL:https://git.kernel.org/stable/c/1052f22e127d0c34c3387bb389424ba1c61491ff MISC:https://git.kernel.org/stable/c/2ccfcd7a09c826516edcfe464b05071961aada3f URL:https://git.kernel.org/stable/c/2ccfcd7a09c826516edcfe464b05071961aada3f MISC:https://git.kernel.org/stable/c/444a2d27fe9867d0da4b28fc45b793f32e099ab8 URL:https://git.kernel.org/stable/c/444a2d27fe9867d0da4b28fc45b793f32e099ab8 MISC:https://git.kernel.org/stable/c/6e7978695f4a6cbd83616b5a702b77fa2087b247 URL:https://git.kernel.org/stable/c/6e7978695f4a6cbd83616b5a702b77fa2087b247 MISC:https://git.kernel.org/stable/c/8009120e0354a67068e920eb10dce532391361d0 URL:https://git.kernel.org/stable/c/8009120e0354a67068e920eb10dce532391361d0 MISC:https://git.kernel.org/stable/c/98342148a8cd242855d7e257f298c966c96dba9f URL:https://git.kernel.org/stable/c/98342148a8cd242855d7e257f298c966c96dba9f MISC:https://git.kernel.org/stable/c/b0e4bafac8963c2d85ee18d3d01f393735acceec URL:https://git.kernel.org/stable/c/b0e4bafac8963c2d85ee18d3d01f393735acceec
Assigning CNA
kernel.org
Date Record Created
20250226	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20250226)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)