CVE-2022-49145

HighCVSS 7.1/10Last modified Jun 17, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

ACPI: CPPC: Avoid out of bounds access when parsing _CPC data

If the NumEntries field in the _CPC return package is less than 2, do not attempt to access the "Revision" element of that package, because it may not be present then.

BugLink: https://lore.kernel.org/lkml/20220322143534.GC32582@xsang-OptiPlex-9020/

Metrics

CVSS 3.1 7.1/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

Weakness enumeration

CWE-125

Affected software

VendorProductVersions
LinuxLinux>= 337aadff8e4567e39669e07d9a88b789d78458b5, < b3f15609ffa521de12244cd6af24002030dda3f5; >= 337aadff8e4567e39669e07d9a88b789d78458b5, < d208ea44e25b31db5a4d5e8c31df51787a3e9303; >= 337aadff8e4567e39669e07d9a88b789d78458b5, < 28d5387c1994f5e1e0d41b30a1f3dd6e1f609252; >= 337aadff8e4567e39669e07d9a88b789d78458b5, < cb249f8c00f40dba83b7da8207ac14ca46e9ec9e; >= 337aadff8e4567e39669e07d9a88b789d78458b5, < e5b681822cac1f8093759b02e16c06b2c64b6788; >= 337aadff8e4567e39669e07d9a88b789d78458b5, < 97b5593fd1b182b3fdb180b6bbe64ec09669988b; >= 337aadff8e4567e39669e07d9a88b789d78458b5, < b80b19b32a432c9eee1cd200ef7aaddf608f54d1; >= 337aadff8e4567e39669e07d9a88b789d78458b5, < d7339f2a3938fb56b5f28d53f5345900b5fa0e74; >= 337aadff8e4567e39669e07d9a88b789d78458b5, < 40d8abf364bcab23bc715a9221a3c8623956257b
LinuxLinux4.4

References

Timeline

Published
Feb 26, 2025
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2022

CVE-2022-491465.5In the Linux kernel, the following vulnerability has been resolved: virtio: use virtio_device_ready() in virtio_device_restore() After wakCVE-2022-491475.5In the Linux kernel, the following vulnerability has been resolved: block: Fix the maximum minor value is blk_alloc_ext_minor() ida_alloc_CVE-2022-491485.5In the Linux kernel, the following vulnerability has been resolved: watch_queue: Free the page array when watch_queue is dismantled CommitCVE-2022-491494.7In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix call timer start racing with call destruction The rxrpc_calCVE-2022-49156.5Inappropriate implementation in URL Formatting in Google Chrome prior to 103.0.5060.134 allowed a remote attacker to perform domain spoofingCVE-2022-491505.5In the Linux kernel, the following vulnerability has been resolved: rtc: gamecube: Fix refcount leak in gamecube_rtc_read_offset_from_sram CVE-2022-491515.5In the Linux kernel, the following vulnerability has been resolved: can: mcba_usb: properly check endpoint type Syzbot reported warning inCVE-2022-491524.7In the Linux kernel, the following vulnerability has been resolved: XArray: Fix xas_create_range() when multi-order entry present If thereCVE-2022-491535.5In the Linux kernel, the following vulnerability has been resolved: wireguard: socket: free skb in send6 when ipv6 is disabled I got a memCVE-2022-491545.5In the Linux kernel, the following vulnerability has been resolved: KVM: SVM: fix panic on out-of-bounds guest IRQ As guest_irq is coming CVE-2022-491555.5In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Suppress a kernel complaint in qla_create_qpair() [ 1CVE-2022-491565.5In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix scheduling while atomic The driver makes a call int