CVE-2024-49862

Summary

In the Linux kernel, the following vulnerability has been resolved:

powercap: intel_rapl: Fix off by one in get_rpi()

The rp->priv->rpi array is either rpi_msr or rpi_tpmi which have NR_RAPL_PRIMITIVES number of elements. Thus the > needs to be >= to prevent an off by one access.

Affected Software

VendorProductVersion RangeStatus
LinuxLinux98ff639a7289067247b3ef9dd5d1e922361e7365 < 288cbc505e2046638c615c36357cb78bc9fee1e0affected
LinuxLinux98ff639a7289067247b3ef9dd5d1e922361e7365 < 851e7f7f14a15f4e47b7d0f70d5c4a2b95b824d6affected
LinuxLinux98ff639a7289067247b3ef9dd5d1e922361e7365 < 6a34f3b0d7f11fb6ed72da315fd2360abd9c0737affected
LinuxLinux98ff639a7289067247b3ef9dd5d1e922361e7365 < 95f6580352a7225e619551febb83595bcb77ab17affected
LinuxLinux6.5affected
LinuxLinux0 < 6.5unaffected
LinuxLinux6.6.54 <= 6.6.*unaffected
LinuxLinux6.10.13 <= 6.10.*unaffected
LinuxLinux6.11.2 <= 6.11.*unaffected
LinuxLinux6.12 <= *unaffected

Weaknesses

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References