Linux · Linux Kernel · CVE-2022-48803
**Name of the Vulnerable Software and Affected Versions**
Linux kernel versions prior to 5.16.0-116492-gdaadb3bd0e8d-dirty #360
**Description**
The vulnerability is related to a missing sentinel for the `clk div table` array in the `phy-j721e-wiz.c` file, which can cause a global-out-of-bounds error when the ` get maxdiv` function tries to access the array. This can lead to a read of size 4 at an invalid address, potentially allowing an attacker to access confidential information. The vulnerability is caused by the ` get table maxdiv` function trying to access the `clk div table` array out of bounds.
**Recommendations**
To resolve the issue, update the Linux kernel to a version that includes the fix for the missing sentinel for the `clk div table` array. As a temporary workaround, consider disabling the `cdns sierra phy init` function or restricting access to the `phy-j721e-wiz.c` file until a patch is available.