CVE-2023-52683

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2023-52683
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2023-52683.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2023-52683
Downstream
Related
Published
2024-05-17T14:24:46Z
Modified
2026-08-12T03:30:42Z
Summary
ACPI: LPIT: Avoid u32 multiplication overflow
Details

In the Linux kernel, the following vulnerability has been resolved:

ACPI: LPIT: Avoid u32 multiplication overflow

In lpit_update_residency() there is a possibility of overflow in multiplication, if tsc_khz is large enough (> UINT_MAX/1000).

Change multiplication to mul_u32_u32().

Found by Linux Verification Center (linuxtesting.org) with SVACE.

Database specific 
{
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/52xxx/CVE-2023-52683.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
eeb2d80d502af28e5660ff4bbe00f90ceb82c2db
Fixed
647d1d50c31e60ef9ccb9756a8fdf863329f7aee
Fixed
6c38e791bde07d6ca2a0a619ff9b6837e0d5f9ad
Fixed
f39c3d578c7d09a18ceaf56750fc7f20b02ada63
Fixed
c1814a4ffd016ce5392c6767d22ef3aa2f0d4bd1
Fixed
72222dfd76a79d9666ab3117fcdd44ca8cd0c4de
Fixed
d1ac288b2742aa4af746c5613bac71760fadd1c4
Fixed
b7aab9d906e2e252a7783f872406033ec49b6dae
Fixed
56d2eeda87995245300836ee4dbd13b002311782

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2023-52683.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
4.15.0
Fixed
4.19.306
Type
ECOSYSTEM
Events
Introduced
4.20.0
Fixed
5.4.268
Type
ECOSYSTEM
Events
Introduced
5.5.0
Fixed
5.10.209
Type
ECOSYSTEM
Events
Introduced
5.11.0
Fixed
5.15.148
Type
ECOSYSTEM
Events
Introduced
5.16.0
Fixed
6.1.75
Type
ECOSYSTEM
Events
Introduced
6.2.0
Fixed
6.6.14
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.7.2

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2023-52683.json"