Linux kernel
cpe:2.3:a:linux:linux_kernel:*:*:*:*:*:*:*, +4 more
A vulnerability in the Linux kernel's DesignWare I2C driver can lead to a 32-bit integer overflow in clock multiplication calculations. This issue arises in the 'i2c_dw_scl_lcnt()' and 'i2c_dw_scl_hcnt()' functions, where the 'ic_clk' parameter, if larger than one million, can cause overflow when multiplied by 4700. The vulnerability has been addressed by adding a cast to 'u64' in the multiplication to prevent overflow and by using the appropriate define for division.
Exploitation of this vulnerability could lead to incorrect clock signal timing, potentially causing communication errors on the I2C bus.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.