CVE-2023-52683

Summary

In the Linux kernel, the following vulnerability has been resolved:

ACPI: LPIT: Avoid u32 multiplication overflow

In lpit_update_residency() there is a possibility of overflow in multiplication, if tsc_khz is large enough (> UINT_MAX/1000).

Change multiplication to mul_u32_u32().

Found by Linux Verification Center (linuxtesting.org) with SVACE.

Affected Software

VendorProductVersion RangeStatus
LinuxLinuxeeb2d80d502af28e5660ff4bbe00f90ceb82c2db < 647d1d50c31e60ef9ccb9756a8fdf863329f7aeeaffected
LinuxLinuxeeb2d80d502af28e5660ff4bbe00f90ceb82c2db < 6c38e791bde07d6ca2a0a619ff9b6837e0d5f9adaffected
LinuxLinuxeeb2d80d502af28e5660ff4bbe00f90ceb82c2db < f39c3d578c7d09a18ceaf56750fc7f20b02ada63affected
LinuxLinuxeeb2d80d502af28e5660ff4bbe00f90ceb82c2db < c1814a4ffd016ce5392c6767d22ef3aa2f0d4bd1affected
LinuxLinuxeeb2d80d502af28e5660ff4bbe00f90ceb82c2db < 72222dfd76a79d9666ab3117fcdd44ca8cd0c4deaffected
LinuxLinuxeeb2d80d502af28e5660ff4bbe00f90ceb82c2db < d1ac288b2742aa4af746c5613bac71760fadd1c4affected
LinuxLinuxeeb2d80d502af28e5660ff4bbe00f90ceb82c2db < b7aab9d906e2e252a7783f872406033ec49b6daeaffected
LinuxLinuxeeb2d80d502af28e5660ff4bbe00f90ceb82c2db < 56d2eeda87995245300836ee4dbd13b002311782affected
LinuxLinux4.15affected
LinuxLinux0 < 4.15unaffected
LinuxLinux4.19.306 <= 4.19.*unaffected
LinuxLinux5.4.268 <= 5.4.*unaffected
LinuxLinux5.10.209 <= 5.10.*unaffected
LinuxLinux5.15.148 <= 5.15.*unaffected
LinuxLinux6.1.75 <= 6.1.*unaffected
LinuxLinux6.6.14 <= 6.6.*unaffected
LinuxLinux6.7.2 <= 6.7.*unaffected
LinuxLinux6.8 <= *unaffected

Weaknesses

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

CVE Program Container

Additional References

References