CVE-2024-49862

HighCVSS 7.1/10Last modified Aug 4, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

powercap: intel_rapl: Fix off by one in get_rpi()

The rp->priv->rpi array is either rpi_msr or rpi_tpmi which have NR_RAPL_PRIMITIVES number of elements. Thus the > needs to be >= to prevent an off by one access.

Metrics

CVSS 3.1 7.1/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

Weakness enumeration

CWE-193

Affected software

VendorProductVersions
LinuxLinux>= 98ff639a7289067247b3ef9dd5d1e922361e7365, < 288cbc505e2046638c615c36357cb78bc9fee1e0; >= 98ff639a7289067247b3ef9dd5d1e922361e7365, < 851e7f7f14a15f4e47b7d0f70d5c4a2b95b824d6; >= 98ff639a7289067247b3ef9dd5d1e922361e7365, < 6a34f3b0d7f11fb6ed72da315fd2360abd9c0737; >= 98ff639a7289067247b3ef9dd5d1e922361e7365, < 95f6580352a7225e619551febb83595bcb77ab17
LinuxLinux6.5

References

Timeline

Published
Oct 21, 2024
Last modified
Aug 4, 2026
NVD status
Modified

Related CVEs from 2024

CVE-2024-498635.5In the Linux kernel, the following vulnerability has been resolved: vhost/scsi: null-ptr-dereference in vhost_scsi_get_req() Since commit CVE-2024-498644.7In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix a race between socket set up and I/O thread creation In rxrCVE-2024-498657.8In the Linux kernel, the following vulnerability has been resolved: drm/xe/vm: move xa_alloc to prevent UAF Evil user can guess the next iCVE-2024-498664.7In the Linux kernel, the following vulnerability has been resolved: tracing/timerlat: Fix a race during cpuhp processing There is another CVE-2024-498675.5In the Linux kernel, the following vulnerability has been resolved: btrfs: wait for fixup workers before stopping cleaner kthread during umCVE-2024-498685.5In the Linux kernel, the following vulnerability has been resolved: btrfs: fix a NULL pointer dereference when failed to start a new trasacCVE-2024-498697.8In the Linux kernel, the following vulnerability has been resolved: btrfs: send: fix buffer overflow detection when copying path to cache eCVE-2024-498705.5In the Linux kernel, the following vulnerability has been resolved: cachefiles: fix dentry leak in cachefiles_open_file() A dentry leak maCVE-2024-498715.5In the Linux kernel, the following vulnerability has been resolved: Input: adp5589-keys - fix NULL pointer dereference We register a devm CVE-2024-498724.7In the Linux kernel, the following vulnerability has been resolved: mm/gup: fix memfd_pin_folios alloc race panic If memfd_pin_folios trieCVE-2024-498735.5In the Linux kernel, the following vulnerability has been resolved: mm/filemap: fix filemap_get_folios_contig THP panic Patch series "memfCVE-2024-498747.0In the Linux kernel, the following vulnerability has been resolved: i3c: master: svc: Fix use after free vulnerability in svc_i3c_master Dr
CVE-2024-49862: High severity, CVSS 7.1 | Vulnix