CVE-2022-50366

powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue

State: Published
Severity: 7.1 High
Published: Sep 17, 2025
Updated: May 11, 2026
Reserved: Sep 17, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue

When value < time_unit, the parameter of ilog2() will be zero and the return value is -1. u64(-1) is too large for shift exponent and then will trigger shift-out-of-bounds:

shift exponent 18446744073709551615 is too large for 32-bit type 'int' Call Trace: rapl_compute_time_window_core rapl_write_data_raw set_time_window store_constraint_time_window_us

Scores

CVSS	Score	Vector	Source
3.1	7.1 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H	CISA-ADP

Weaknesses

CWE-125 Out-of-bounds Read

Affected Products

Product	Versions
LinuxLinux	2d281d8196e38dd3a4ee9af26621ddde8329f269 to before 42f79dbb9514f726ff21df25f09cb0693b0b2445Affected 2d281d8196e38dd3a4ee9af26621ddde8329f269 to before 3eb0ba70376f6ee40fa843fc9cee49269370b0b3Affected 2d281d8196e38dd3a4ee9af26621ddde8329f269 to before 4ebba43384722adbd325baec3a12c572d94488ebAffected 2d281d8196e38dd3a4ee9af26621ddde8329f269 to before 49a6ffdaed60f0eb52c198fafebc05994e16e305Affected 2d281d8196e38dd3a4ee9af26621ddde8329f269 to before 708b9abe1b4a2f050a483db4b7edfc446b13df1fAffected 2d281d8196e38dd3a4ee9af26621ddde8329f269 to before 139bbbd01114433b80fe59f5e1330615aadf9752Affected 2d281d8196e38dd3a4ee9af26621ddde8329f269 to before 6216b685b8f48ab7b721a6fd5acbf526b41c13e8Affected 2d281d8196e38dd3a4ee9af26621ddde8329f269 to before 1d94af37565e4d3c26b0d63428e093a37d5b4c32Affected 2d281d8196e38dd3a4ee9af26621ddde8329f269 to before 2d93540014387d1c73b9ccc4d7895320df66d01bAffected
LinuxLinux	3.13Affected before 3.13Not affected 4.9.331 through 4.9.Not affected 4.14.296 through 4.14.Not affected 4.19.262 through 4.19.Not affected 5.4.220 through 5.4.Not affected 5.10.150 through 5.10.Not affected 5.15.75 through 5.15.Not affected 5.19.17 through 5.19.Not affected 6.0.3 through 6.0.Not affected 6.1 and laterNot affected

Product

Versions

LinuxLinux

2d281d8196e38dd3a4ee9af26621ddde8329f269 to before 42f79dbb9514f726ff21df25f09cb0693b0b2445Affected
2d281d8196e38dd3a4ee9af26621ddde8329f269 to before 3eb0ba70376f6ee40fa843fc9cee49269370b0b3Affected
2d281d8196e38dd3a4ee9af26621ddde8329f269 to before 4ebba43384722adbd325baec3a12c572d94488ebAffected
2d281d8196e38dd3a4ee9af26621ddde8329f269 to before 49a6ffdaed60f0eb52c198fafebc05994e16e305Affected
2d281d8196e38dd3a4ee9af26621ddde8329f269 to before 708b9abe1b4a2f050a483db4b7edfc446b13df1fAffected
2d281d8196e38dd3a4ee9af26621ddde8329f269 to before 139bbbd01114433b80fe59f5e1330615aadf9752Affected
2d281d8196e38dd3a4ee9af26621ddde8329f269 to before 6216b685b8f48ab7b721a6fd5acbf526b41c13e8Affected
2d281d8196e38dd3a4ee9af26621ddde8329f269 to before 1d94af37565e4d3c26b0d63428e093a37d5b4c32Affected
2d281d8196e38dd3a4ee9af26621ddde8329f269 to before 2d93540014387d1c73b9ccc4d7895320df66d01bAffected

LinuxLinux

3.13Affected
before 3.13Not affected
4.9.331 through 4.9.*Not affected
4.14.296 through 4.14.*Not affected
4.19.262 through 4.19.*Not affected
5.4.220 through 5.4.*Not affected
5.10.150 through 5.10.*Not affected
5.15.75 through 5.15.*Not affected
5.19.17 through 5.19.*Not affected
6.0.3 through 6.0.*Not affected
6.1 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.