Vulnerability in Linux

CVE-2022-50580

In the Linux kernel, the following vulnerability has been resolved: blk-throttle: prevent overflow while calculating wait time There is a problem found by code review in tg_with_in_bps_limit() that 'bps_limit * jiffy_elapsed_rnd' might overflow. Fix the problem by calling mul_u64_u64_div_u64() instead.

EPSS: 0.002 (10.1th percentile) — read the EPSS interpretation.

Affected products

  • Linux — versions e43473b7f223ec866f7db273697e76c337c390f9, 2.6.37, 0

References