VulnerabilityDeferred
CVE-2022-50580
In the Linux kernel, the following vulnerability has been resolved: blk-throttle: prevent overflow while calculating wait time There is a problem found by code review in tg_with_in_bps_limit() that 'bps_limit * jiffy_elapsed_rnd' might overflow.
UnscoredEPSS 0.20%
Does this matter?
Not yet scored. NVD analysis is pending; check back once CVSS and EPSS values are published.
Description
In the Linux kernel, the following vulnerability has been resolved: blk-throttle: prevent overflow while calculating wait time There is a problem found by code review in tg_with_in_bps_limit() that 'bps_limit * jiffy_elapsed_rnd' might overflow. Fix the problem by calling mul_u64_u64_div_u64() instead.
- CVSS
- Not yet scored
- EPSS
- 0.20% probability · 10th percentile
- CISA KEV
- Not listed
- Source
- 416baaa9-dc9f-4396-8d5f-8c081fb06d67
References
- https://git.kernel.org/stable/c/19c010ae44f0ce52b5436080492a61a092ee0cf4
- https://git.kernel.org/stable/c/70b2adb1d698fbc63d3b3848c452524dc15872c5
- https://git.kernel.org/stable/c/8d6bbaada2e0a65f9012ac4c2506460160e7237a
- https://git.kernel.org/stable/c/ca67b0563b39e79290c23e509319c178b9ca9104
- https://git.kernel.org/stable/c/cc6f0855bf8d9b729df28ff443ced7350c380dbd
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.