CVE-2022-50582

In the Linux kernel, the following vulnerability has been resolved:

regulator: core: Prevent integer underflow

By using a ratio of delay to poll_enabled_time that is not integer time_remaining underflows and does not exit the loop as expected. As delay could be derived from DT and poll_enabled_time is defined in the driver this can easily happen.

Use a signed iterator to make sure that the loop exits once the remaining time is negative.

The enable path used an unsigned int time_remaining. When the computed delay went negative, it underflowed and wrapped to a large positive value, preventing the loop from terminating and potentially stalling regulator enable (DoS on the code path, possibly during boot). The fix switches time_remaining to a signed int so the loop exits once the remaining time becomes negative. Privileged/local code (drivers or root via regulator controls) is typically required to reach this path.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.