CVE-2024-49862CWE-193

CVE-2024-49862

High · published October 21, 2024

CVSS v3.1
7.1
EPSS
0%
Percentile
12.7
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

powercap: intel_rapl: Fix off by one in get_rpi()

The rp->priv->rpi array is either rpi_msr or rpi_tpmi which have

NR_RAPL_PRIMITIVES number of elements. Thus the > needs to be >=

to prevent an off by one access.

The record
Technical detail
CVSS v3.1
7.1 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00227 · 12.7th percentile
Weakness
CWE-193 · Off-by-one Error
Published
2024-10-21T17:15Z
Affected products (3)
ProductVersionsFixed in
linux/linux_kernel≥ 6.5, < 6.6.546.6.54
linux/linux_kernel≥ 6.7, < 6.10.136.10.13
linux/linux_kernel≥ 6.11, < 6.11.26.11.2
References (4)
EPSS history
Timeline
  • 21 OCT 12:27Z
    powercap: intel_rapl: Fix off by one in get_rpi()
    cvelistv5