CVE-2022-49749

i2c: designware: use casting of u64 in clock multiplication to avoid overflow

Medium · published March 27, 2025

CVSS v3.1
5.5
EPSS
0%
Percentile
8.6
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

i2c: designware: use casting of u64 in clock multiplication to avoid overflow

In functions i2c_dw_scl_lcnt() and i2c_dw_scl_hcnt() may have overflow

by depending on the values of the given parameters including the ic_clk.

For example in our use case where ic_clk is larger than one million,

multiplication of ic_clk * 4700 will result in 32 bit overflow.

Add cast of u64 to the calculation to avoid multiplication overflow, and

use the corresponding define for divide.

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00194 · 8.6th percentile
Published
2025-03-27T16:42Z
EPSS history
Timeline
  • 27 MAR 16:42Z
    i2c: designware: use casting of u64 in clock multiplication to avoid overflow
    cvelistv5