Skip to content

ACPI: LPIT: Avoid u32 multiplication overflow

Mark Langsdorf requested to merge mlangsdorf/centos-stream-9:jira37062 into main

JIRA: https://issues.redhat.com/browse/RHEL-37064
CVE: CVE-2023-52683

commit 56d2eeda87995245300836ee4dbd13b002311782
Author: Nikita Kiryushin kiryushin@ancud.ru
Date: Thu Nov 9 21:08:59 2023 +0300

In lpit_update_residency() there is a possibility of overflow in multiplication, if tsc_khz is large enough (> UINT_MAX/1000).

Change multiplication to mul_u32_u32().

Found by Linux Verification Center (linuxtesting.org) with SVACE.

Fixes: eeb2d80d ("ACPI / LPIT: Add Low Power Idle Table (LPIT) support")
Signed-off-by: Nikita Kiryushin kiryushin@ancud.ru
Signed-off-by: Rafael J. Wysocki rafael.j.wysocki@intel.com
Signed-off-by: Mark Langsdorf mlangsdo@redhat.com

Edited by Mark Langsdorf

Merge request reports