Skip to content
Heist/ feed
Back to feed
MediumFix available

watchdog: rzg2l_wdt: Fix 32bit overflow issue

Type: advisorySources: OSV

In the Linux kernel, the following vulnerability has been resolved: watchdog: rzg2l_wdt: Fix 32bit overflow issue The value of timer_cycle_us can be 0 due to 32bit overflow. For eg:- If we assign the counter value "0xfff" for computing maxval. This patch fixes this issue by appending ULL to 1024, so that it is promoted to 64bit. This patch also fixes the warning message, 'watchdog: Invalid min and max timeout values, resetting to 0!'.

Products
Kernel
Affected versions
Not specified
Fixed versions
5.17.15, 5.18.4
CVEs
CVE-2022-49387
Confirmed fixed CVEs
Not specified
Updated in this feed
8 Nov 2026, 02:56 UTC · Revision 1

Source evidence

watchdog: rzg2l_wdt: Fix 32bit overflow issue

core-osv · Original source

Published 26 Feb 2025, 02:11 UTC

In the Linux kernel, the following vulnerability has been resolved: watchdog: rzg2l_wdt: Fix 32bit overflow issue The value of timer_cycle_us can be 0 due to 32bit overflow. For eg:- If we assign the counter value "0xfff" for computing maxval. This patch fixes this issue by appending ULL to 1024, so that it is promoted to 64bit. This patch also fixes the warning message, 'watchdog: Invalid min and max timeout values, resetting to 0!'.

osv:CVE-2022-49387

Kernel

Fixed versions: 5.17.15, 5.18.4

Complete source record
{
  "id": "e6fffdbc312cb608a1e020b5d4c41603c612855d4d8cab951a6d13d5d4a6e795",
  "url": "https://osv.dev/vulnerability/CVE-2022-49387",
  "method": "structured",
  "payload": {
    "kind": "advisory",
    "title": "watchdog: rzg2l_wdt: Fix 32bit overflow issue",
    "summary": "In the Linux kernel, the following vulnerability has been resolved: watchdog: rzg2l_wdt: Fix 32bit overflow issue The value of timer_cycle_us can be 0 due to 32bit overflow. For eg:- If we assign the counter value \"0xfff\" for computing maxval. This patch fixes this issue by appending ULL to 1024, so that it is promoted to 64bit. This patch also fixes the warning message, 'watchdog: Invalid min and max timeout values, resetting to 0!'.",
    "evidence": "osv:CVE-2022-49387",
    "products": [
      {
        "name": {
          "value": "Kernel",
          "evidence": "/affected/1/package/name"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "5.17.15",
            "evidence": "/affected/1/ranges"
          },
          {
            "value": "5.18.4",
            "evidence": "/affected/1/ranges"
          }
        ],
        "affected_versions": []
      }
    ],
    "severity": "medium",
    "structured": {
      "id": "CVE-2022-49387",
      "aliases": [
        "CVE-2022-49387"
      ],
      "metrics": [
        {
          "type": "CVSS_V3",
          "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
        }
      ],
      "affected": [
        {
          "ranges": [
            {
              "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
              "type": "GIT",
              "events": [
                {
                  "introduced": "2cbc5cd0b55fa2310cc557c77b0665f5e00272de"
                },
                {
                  "fixed": "e07b9fa0dc32b492de85528caaf9f0c605d8424f"
                },
                {
                  "fixed": "b95a47667d34e76c2c9013f8e3b1e5039a5a0b76"
                },
                {
                  "fixed": "ea2949df22a533cdf75e4583c00b1ce94cd5a83b"
                }
              ]
            }
          ],
          "database_specific": {
            "source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-49387.json"
          }
        },
        {
          "ranges": [
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "5.17.0"
                },
                {
                  "fixed": "5.17.15"
                }
              ]
            },
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "5.18.0"
                },
                {
                  "fixed": "5.18.4"
                }
              ]
            }
          ],
          "package": {
            "name": "Kernel",
            "ecosystem": "Linux"
          },
          "database_specific": {
            "source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-49387.json"
          }
        }
      ],
      "modified": "2026-10-28T02:30:53.511698238Z",
      "provider": "osv",
      "references": [
        "https://git.kernel.org/stable/c/b95a47667d34e76c2c9013f8e3b1e5039a5a0b76",
        "https://git.kernel.org/stable/c/e07b9fa0dc32b492de85528caaf9f0c605d8424f",
        "https://git.kernel.org/stable/c/ea2949df22a533cdf75e4583c00b1ce94cd5a83b",
        "https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49387.json",
        "https://nvd.nist.gov/vuln/detail/CVE-2022-49387",
        "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git"
      ],
      "provider_metadata": {
        "cna_assigner": "Linux",
        "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49387.json"
      }
    },
    "related_cves": [
      {
        "value": "CVE-2022-49387",
        "evidence": "/id"
      }
    ],
    "security_relevant": true,
    "severity_evidence": "/severity/0/score"
  },
  "source_id": "core-osv",
  "document_id": 521992,
  "published_at": "2025-02-26T02:11:21.804+00:00"
}