CVE-2022-49451

In the Linux kernel, the following vulnerability has been resolved:

firmware: arm_scmi: Fix list protocols enumeration in the base protocol

While enumerating protocols implemented by the SCMI platform using BASE_DISCOVER_LIST_PROTOCOLS, the number of returned protocols is currently validated in an improper way since the check employs a sum between unsigned integers that could overflow and cause the check itself to be silently bypassed if the returned value 'loop_num_ret' is big enough.

Fix the validation avoiding the addition.

This vulnerability is rated Moderate because triggering the flaw requires an abnormal response from system firmware on ARM-based hardware, limiting the attack surface to specialized architectures with untrusted firmware. During protocol enumeration in the ARM System Control and Management Interface (SCMI) subsystem, an integer overflow could bypass response validation and lead to a denial of service. Standard enterprise installations on other architectures are unaffected, and supported Red Hat Enterprise Linux releases do not include the vulnerable implementation.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.