Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Kishon Vijay Abraham I

Researcher fromTexas Instruments
#46078of 53,633
5.5Total CVSS
Vulnerabilities · 1
PT-2024-10517
5.5
2022-01-24
Linux · Linux Kernel · CVE-2022-48803
**Name of the Vulnerable Software and Affected Versions** Linux kernel versions prior to 5.16.0-116492-gdaadb3bd0e8d-dirty #360 **Description** The vulnerability is related to a missing sentinel for the `clk div table` array in the `phy-j721e-wiz.c` file, which can cause a global-out-of-bounds error when the ` get maxdiv` function tries to access the array. This can lead to a read of size 4 at an invalid address, potentially allowing an attacker to access confidential information. The vulnerability is caused by the ` get table maxdiv` function trying to access the `clk div table` array out of bounds. **Recommendations** To resolve the issue, update the Linux kernel to a version that includes the fix for the missing sentinel for the `clk div table` array. As a temporary workaround, consider disabling the `cdns sierra phy init` function or restricting access to the `phy-j721e-wiz.c` file until a patch is available.