Vulnerability in Linux

CVE-2022-50582

In the Linux kernel, the following vulnerability has been resolved: regulator: core: Prevent integer underflow By using a ratio of delay to poll_enabled_time that is not integer time_remaining underflows and does not exit the loop as expected. As delay could be derived from DT and poll_enabled_time is defined in the driver this can easily happen. Use a signed iterator to make sure that the loop exits once the remaining time is negative.

EPSS: 0.002 (10.1th percentile) — read the EPSS interpretation.

Affected products

  • Linux — versions f7d7ad42a9dc2d63cab6a79fe31e6732a30dacf5, 5.9, 0

References