CVE-2024-49862: powercap: intel_rapl: Fix off by one in get_rpi()
In the Linux kernel, the following vulnerability has been resolved:
powercap: intelrapl: Fix off by one in getrpi()
The rp->priv->rpi array is either rpimsr or rpitpmi which have NRRAPLPRIMITIVES number of elements. Thus the > needs to be >= to prevent an off by one access.
Other sources
In the Linux kernel, the following vulnerability has been resolved:
powercap: intelrapl: Fix off by one in getrpi()
The rp->priv->rpi array is either rpimsr or rpitpmi which have NRRAPLPRIMITIVES number of elements. Thus the > needs to be >= to prevent an off by one access.
— NVD
This CVE was automatically created from a reference found in an email or other text. If you are reading this, then this CVE entry is probably erroneous, since this text should be replaced by the official CVE description automatically.
— Launchpad
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.223-1Fixed in 5.10.234-1Fixed in 6.1.129-1Fixed in 6.1.135-1Fixed in 6.12.22-1Fixed in 6.12.25-1
Event History
Frequently Asked Questions
What is the severity of CVE-2024-49862?
CVE-2024-49862 is classified as a vulnerability in the Linux kernel that involves an off-by-one error in the powercap subsystem.
How do I fix CVE-2024-49862?
To fix CVE-2024-49862, you should upgrade to a patched version of the Linux kernel that addresses this vulnerability.
What versions of the Linux kernel are affected by CVE-2024-49862?
CVE-2024-49862 affects several versions of the Linux kernel, including those between 6.5 and 6.6.54, 6.7 and 6.10.13, as well as 6.11 and 6.11.2.
Is CVE-2024-49862 exploitable?
There is a potential for exploitation in CVE-2024-49862 due to the improper array index access, which could lead to unexpected behavior.
When was CVE-2024-49862 resolved?
CVE-2024-49862 was resolved through updates in the Linux kernel addressing the identified off-by-one error.