CVE-2022-48803: 
Linux Kernel vulnerability analysis and mitigation

In the Linux kernel, a vulnerability was discovered in the phy-j721e-wiz.c file related to missing sentinel for clkdivtable. The issue was assigned CVE-2022-48803 and was disclosed on July 16, 2024. The vulnerability affects the Texas Instruments WIZ module present in TI J721E SoC (Kernel Git).

The vulnerability occurs when gettablemaxdiv() attempts to access the "clkdivtable" array out of bounds as defined in phy-j721e-wiz.c. This results in a global-out-of-bounds error that can be detected when KASAN (Kernel Address Sanitizer) is enabled. The issue was caused by missing a sentinel entry in the clkdiv_table array (Kernel Git).

When triggered, the vulnerability results in a KASAN global-out-of-bounds error, which could potentially lead to memory corruption or system instability. The issue specifically affects systems using the TI J721E SoC with the WIZ module (Kernel Git).

The vulnerability has been fixed by adding a sentinel entry to the clkdivtable array in the phy-j721e-wiz.c file. The fix was implemented in the Linux kernel and backported to stable kernel versions 5.10 and later (Kernel Git).