Riskcovery

CVE-2024-49862

powercap: intel_rapl: Fix off by one in get_rpi()

State
Published
Severity
7.1 High
Published
Oct 21, 2024
Updated
Aug 5, 2026
Reserved
Oct 21, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

powercap: intel_rapl: Fix off by one in get_rpi()

The rp->priv->rpi array is either rpi_msr or rpi_tpmi which have NR_RAPL_PRIMITIVES number of elements. Thus the > needs to be >= to prevent an off by one access.

Scores

CVSSScoreVectorSource
3.17.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:HLinux

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 98ff639a7289067247b3ef9dd5d1e922361e7365 to before 288cbc505e2046638c615c36357cb78bc9fee1e0Affected
  • 98ff639a7289067247b3ef9dd5d1e922361e7365 to before 851e7f7f14a15f4e47b7d0f70d5c4a2b95b824d6Affected
  • 98ff639a7289067247b3ef9dd5d1e922361e7365 to before 6a34f3b0d7f11fb6ed72da315fd2360abd9c0737Affected
  • 98ff639a7289067247b3ef9dd5d1e922361e7365 to before 95f6580352a7225e619551febb83595bcb77ab17Affected
LinuxLinux
  • 6.5Affected
  • before 6.5Not affected
  • 6.6.54 through 6.6.*Not affected
  • 6.10.13 through 6.10.*Not affected
  • 6.11.2 through 6.11.*Not affected
  • 6.12 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.