CVE-2022-49946

A flaw was found in the Linux kernel's Raspberry Pi clock driver. During device initialization, the clock discovery routine assumes that data received from the VideoCore firmware terminates with a zero identifier. If the firmware returns malformed or unexpected data lacking this terminator, the driver reads past the buffer boundary. This out-of-bounds memory access can cause a system crash, resulting in a Denial of Service (DoS), or potentially lead to kernel information disclosure.

This vulnerability is rated as Moderate impact because exploitation requires malformed or untrusted firmware responses during device clock enumeration, confining the attack surface to systems utilizing specific Broadcom hardware. Standard Red Hat Enterprise Linux releases do not include the affected driver and remain unaffected, while impact is confined to specialized embedded profiles such as Red Hat In-Vehicle OS. Because the issue occurs solely during kernel hardware initialization when communicating with the underlying firmware, it cannot be triggered directly by regular local users under normal operating conditions.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.