CVE Database›CVE-2022-49964

CVE-2022-49964

kernel: arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level

Loading…

Severity

Moderate

Red Hat Product Security

7

CVSS 3.1

Review impact separately from score.

Published · June 18, 2025

Updated · June 30, 2026

Description

An integer overflow exists in the linux kernel such that the value returned from acpi_find_last_cache_level() is then assigned to unsigned fw_level, which will result in the number of cache leaves calculated incorrectly, resulting in damage to the confidentiality, integrity, and availability of the system.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

CVSS / CWE

CVSS 3.1 · 7
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-190 · Integer Overflow or Wraparound