← CVE Intelligence

CVE-2024-49862

powercap: intel_rapl: Fix off by one in get_rpi() PUBLISHED

Description (CNA)

In the Linux kernel, the following vulnerability has been resolved: powercap: intel_rapl: Fix off by one in get_rpi() The rp->priv->rpi array is either rpi_msr or rpi_tpmi which have NR_RAPL_PRIMITIVES number of elements. Thus the > needs to be >= to prevent an off by one access.

Affected (CNA)

Vendor / productVersions
Linux / Linuxaffected 98ff639a7289067247b3ef9dd5d1e922361e7365 before 288cbc505e2046638c615c36357cb78bc9fee1e0; affected 98ff639a7289067247b3ef9dd5d1e922361e7365 before 851e7f7f14a15f4e47b7d0f70d5c4a2b95b824d6; affected 98ff639a7289067247b3ef9dd5d1e922361e7365 before 6a34f3b0d7f11fb6ed72da315fd2360abd9c0737; affected 98ff639a7289067247b3ef9dd5d1e922361e7365 before 95f6580352a7225e619551febb83595bcb77ab17
Linux / Linuxaffected 6.5; unaffected 0 before 6.5; unaffected 6.6.54 through 6.6.*; unaffected 6.10.13 through 6.10.*; unaffected 6.11.2 through 6.11.*; unaffected 6.12 through *

CWE

No CWE identifiers supplied.

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.