CVE-2022-49145

ACPI: CPPC: Avoid out of bounds access when parsing _CPC data

State: Published
Severity: Not scored
Published: Feb 26, 2025
Updated: May 11, 2026
Reserved: Feb 26, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

ACPI: CPPC: Avoid out of bounds access when parsing _CPC data

If the NumEntries field in the _CPC return package is less than 2, do not attempt to access the "Revision" element of that package, because it may not be present then.

BugLink: https://lore.kernel.org/lkml/20220322143534.GC32582@xsang-OptiPlex-9020/

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	337aadff8e4567e39669e07d9a88b789d78458b5 to before b3f15609ffa521de12244cd6af24002030dda3f5Affected 337aadff8e4567e39669e07d9a88b789d78458b5 to before d208ea44e25b31db5a4d5e8c31df51787a3e9303Affected 337aadff8e4567e39669e07d9a88b789d78458b5 to before 28d5387c1994f5e1e0d41b30a1f3dd6e1f609252Affected 337aadff8e4567e39669e07d9a88b789d78458b5 to before cb249f8c00f40dba83b7da8207ac14ca46e9ec9eAffected 337aadff8e4567e39669e07d9a88b789d78458b5 to before e5b681822cac1f8093759b02e16c06b2c64b6788Affected 337aadff8e4567e39669e07d9a88b789d78458b5 to before 97b5593fd1b182b3fdb180b6bbe64ec09669988bAffected 337aadff8e4567e39669e07d9a88b789d78458b5 to before b80b19b32a432c9eee1cd200ef7aaddf608f54d1Affected 337aadff8e4567e39669e07d9a88b789d78458b5 to before d7339f2a3938fb56b5f28d53f5345900b5fa0e74Affected 337aadff8e4567e39669e07d9a88b789d78458b5 to before 40d8abf364bcab23bc715a9221a3c8623956257bAffected
LinuxLinux	4.4Affected before 4.4Not affected 4.9.311 through 4.9.Not affected 4.14.276 through 4.14.Not affected 4.19.238 through 4.19.Not affected 5.4.189 through 5.4.Not affected 5.10.110 through 5.10.Not affected 5.15.33 through 5.15.Not affected 5.16.19 through 5.16.Not affected 5.17.2 through 5.17.Not affected 5.18 and laterNot affected

Product

Versions

LinuxLinux

337aadff8e4567e39669e07d9a88b789d78458b5 to before b3f15609ffa521de12244cd6af24002030dda3f5Affected
337aadff8e4567e39669e07d9a88b789d78458b5 to before d208ea44e25b31db5a4d5e8c31df51787a3e9303Affected
337aadff8e4567e39669e07d9a88b789d78458b5 to before 28d5387c1994f5e1e0d41b30a1f3dd6e1f609252Affected
337aadff8e4567e39669e07d9a88b789d78458b5 to before cb249f8c00f40dba83b7da8207ac14ca46e9ec9eAffected
337aadff8e4567e39669e07d9a88b789d78458b5 to before e5b681822cac1f8093759b02e16c06b2c64b6788Affected
337aadff8e4567e39669e07d9a88b789d78458b5 to before 97b5593fd1b182b3fdb180b6bbe64ec09669988bAffected
337aadff8e4567e39669e07d9a88b789d78458b5 to before b80b19b32a432c9eee1cd200ef7aaddf608f54d1Affected
337aadff8e4567e39669e07d9a88b789d78458b5 to before d7339f2a3938fb56b5f28d53f5345900b5fa0e74Affected
337aadff8e4567e39669e07d9a88b789d78458b5 to before 40d8abf364bcab23bc715a9221a3c8623956257bAffected

LinuxLinux

4.4Affected
before 4.4Not affected
4.9.311 through 4.9.*Not affected
4.14.276 through 4.14.*Not affected
4.19.238 through 4.19.*Not affected
5.4.189 through 5.4.*Not affected
5.10.110 through 5.10.*Not affected
5.15.33 through 5.15.*Not affected
5.16.19 through 5.16.*Not affected
5.17.2 through 5.17.*Not affected
5.18 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.