NetSight
IP …
high7.1

CVE-2022-50366

In the Linux kernel, the following vulnerability has been resolved: powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue When value < time_unit, the param…

Impact

In the Linux kernel, the following vulnerability has been resolved: powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue When value < time_unit, the parameter of ilog2() will be zero and the return value is -1. u64(-1) is too large for shift exponent and then will trigger shift-out-of-bounds: shift exponent 18446744073709551615 is too large for 32-bit type 'int' Call Trace: rapl_compute_time_window_core rapl_write_data_raw set_time_window store_constraint_time_window_us

Affected products

VendorProductAffected versions
LinuxLinux Kernel
before 4.9.331
from 4.10 before 4.14.296
from 4.15 before 4.19.262
from 4.20 before 5.4.220
from 5.5 before 5.10.150
from 5.11 before 5.15.75

Weakness classification

CWE-125

References