CVE-2022-49792CWE-125

CVE-2022-49792

High · published May 1, 2025

CVSS v3.1
7.3
EPSS
0%
Percentile
10.2
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

iio: adc: mp2629: fix potential array out of bound access

Add sentinel at end of maps to avoid potential array out of

bound access in iio core.

The record
Technical detail
CVSS v3.1
7.3 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H
CVSS v4.0
Not supplied
EPSS
0.00207 · 10.2th percentile
Weakness
CWE-125 · Out-of-bounds Read
Published
2025-05-01T19:16Z
Affected products (8)
ProductVersionsFixed in
linux/linux_kernel≥ 5.8, < 5.10.1565.10.156
linux/linux_kernel≥ 5.11, < 5.15.805.15.80
linux/linux_kernel≥ 5.16, < 6.0.106.0.10
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
References (4)
https://git.kernel.org/stable/c/1678d4abb2dc2ca3b05b998a9d88616976e4f947 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/399b2105a2240e730b9f3880bd8f154247539aa7 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/ca1547ab15f48dc81624183ae17a2fd1bad06dfc · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/d95b85c5084ad70011988861ee864529eefa1da0 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67
EPSS history
Timeline
  • 01 MAY 14:09Z
    iio: adc: mp2629: fix potential array out of bound access
    cvelistv5