In the Linux kernel, the following vulnerability has been resolved:

i2c: designware: use casting of u64 in clock multiplication to avoid overflow

In functions i2c_dw_scl_lcnt() and i2c_dw_scl_hcnt() may have overflow
by depending on the values of the given parameters including the ic_clk.
For example in our use case where ic_clk is larger than one million,
multiplication of ic_clk * 4700 will result in 32 bit overflow.

Add cast of u64 to the calculation to avoid multiplication overflow, and
use the corresponding define for divide.

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00026.

Exploitation none

Automatable no

Technical Impact partial

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions
Linux Linux unaffected
Version Status Constraints
2373f6b9744d5373b886f3ce1a985193cca0a356 affected
< ed173f77fd28a3e4fffc13b3f28687b9eba61157
2373f6b9744d5373b886f3ce1a985193cca0a356 affected
< 2f29d780bd691d20e89e5b35d5e6568607115e94
2373f6b9744d5373b886f3ce1a985193cca0a356 affected
< 9f36aae9e80e79b7a6d62227eaa96935166be9fe
2373f6b9744d5373b886f3ce1a985193cca0a356 affected
< c8c37bc514514999e62a17e95160ed9ebf75ca8d
Linux Linux affected
Version Status Constraints
3.2 affected
—
0 unaffected
< 3.2
5.10.166 unaffected
≤ 5.10.*
5.15.91 unaffected
≤ 5.15.*
6.1.9 unaffected
≤ 6.1.*
6.2 unaffected
≤ *

Configuration 1 [-]

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.2:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.2:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.2:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.2:rc4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.2:rc5:*:*:*:*:*:*

No data.

No data.

Subscriptions

Vendors Products
Linux Subscribe
Linux Kernel Subscribe

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
EUVD EUVD EUVD-2022-55174 In the Linux kernel, the following vulnerability has been resolved: i2c: designware: use casting of u64 in clock multiplication to avoid overflow In functions i2c_dw_scl_lcnt() and i2c_dw_scl_hcnt() may have overflow by depending on the values of the given parameters including the ic_clk. For example in our use case where ic_clk is larger than one million, multiplication of ic_clk * 4700 will result in 32 bit overflow. Add cast of u64 to the calculation to avoid multiplication overflow, and use the corresponding define for divide.
Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
https://git.kernel.org/stable/c/2f29d780bd691d20e89e5b35d5e6568607115e94 cve-icon cve-icon
https://git.kernel.org/stable/c/9f36aae9e80e79b7a6d62227eaa96935166be9fe cve-icon cve-icon
https://git.kernel.org/stable/c/c8c37bc514514999e62a17e95160ed9ebf75ca8d cve-icon cve-icon
https://git.kernel.org/stable/c/ed173f77fd28a3e4fffc13b3f28687b9eba61157 cve-icon cve-icon
https://lore.kernel.org/linux-cve-announce/2025032759-CVE-2022-49749-ed85@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2022-49749 cve-icon
https://www.cve.org/CVERecord?id=CVE-2022-49749 cve-icon
History

Wed, 01 Oct 2025 18:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Mon, 14 Apr 2025 20:45:00 +0000

Type Values Removed Values Added
First Time appeared Linux
Linux linux Kernel
Weaknesses CWE-190
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.2:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.2:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.2:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.2:rc4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.2:rc5:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel

Fri, 28 Mar 2025 13:45:00 +0000

Type Values Removed Values Added
References
Metrics threat_severity

None

 cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}

threat_severity

Low

Thu, 27 Mar 2025 17:00:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: i2c: designware: use casting of u64 in clock multiplication to avoid overflow In functions i2c_dw_scl_lcnt() and i2c_dw_scl_hcnt() may have overflow by depending on the values of the given parameters including the ic_clk. For example in our use case where ic_clk is larger than one million, multiplication of ic_clk * 4700 will result in 32 bit overflow. Add cast of u64 to the calculation to avoid multiplication overflow, and use the corresponding define for divide.
Title i2c: designware: use casting of u64 in clock multiplication to avoid overflow
References
cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2025-10-01T17:23:29.836Z

Reserved: 2025-03-27T16:39:17.988Z

Link: CVE-2022-49749

cve-icon Vulnrichment

Updated: 2025-10-01T16:59:12.479Z

cve-icon NVD

Status : Modified

Published: 2025-03-27T17:15:39.730

Modified: 2025-10-01T18:15:32.307

Link: CVE-2022-49749

cve-icon Redhat

Severity : Low

Publid Date: 2025-03-27T00:00:00Z

Links: CVE-2022-49749 - Bugzilla

cve-icon OpenCVE Enrichment

No data.

Weaknesses