CVE-2022-48657: Linux Kernel

High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days.

In the Linux kernel, the following vulnerability has been resolved: arm64: topology: fix possible overflow in amu_fie_setup() cpufreq_get_hw_max_freq() returns max frequency in kHz as *unsigned int*, while freq_inv_set_max_ratio() gets passed this frequency in Hz as 'u64'. Multiplying max frequency by 1000 can potentially result in overflow -- multiplying by 1000ULL instead should avoid that... Found by Linux Verification Center (linuxtesting.org) with the SVACE static analysis tool.

Affected products

• Linux Linux Kernel: from 5.7, before 5.10.150 (fixed in 5.10.150); from 5.11, before 5.15.71 (fixed in 5.15.71); from 5.16, before 5.19.12 (fixed in 5.19.12)

Published 2024-04-28. Last modified 2026-06-17.