CVE-2022-49946

clk: bcm: rpi: Prevent out-of-bounds access

published June 18, 2025

CVSS
—
EPSS
0%
Percentile
13.9
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

clk: bcm: rpi: Prevent out-of-bounds access

The while loop in raspberrypi_discover_clocks() relies on the assumption

that the id of the last clock element is zero. Because this data comes

from the Videocore firmware and it doesn't guarantuee such a behavior

this could lead to out-of-bounds access. So fix this by providing

a sentinel element.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00237 · 13.9th percentile
Published
2025-06-18T11:00Z
EPSS history
Timeline
  • 18 JUN 11:00Z
    clk: bcm: rpi: Prevent out-of-bounds access
    cvelistv5