CVE-2022-50366 (GCVE-0-2022-50366)
Vulnerability from cvelistv5 – Published: 2025-09-17 14:56 – Updated: 2026-01-14 18:42
VLAI?
Title
powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
Summary
In the Linux kernel, the following vulnerability has been resolved:
powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
When value < time_unit, the parameter of ilog2() will be zero and
the return value is -1. u64(-1) is too large for shift exponent
and then will trigger shift-out-of-bounds:
shift exponent 18446744073709551615 is too large for 32-bit type 'int'
Call Trace:
rapl_compute_time_window_core
rapl_write_data_raw
set_time_window
store_constraint_time_window_us
Severity ?
7.1 (High)
CWE
- CWE-125 - Out-of-bounds Read
Assigner
References
Impacted products
| Vendor | Product | Version | |||||||
|---|---|---|---|---|---|---|---|---|---|
| Linux | Linux |
Affected:
2d281d8196e38dd3a4ee9af26621ddde8329f269 , < 42f79dbb9514f726ff21df25f09cb0693b0b2445
(git)
Affected: 2d281d8196e38dd3a4ee9af26621ddde8329f269 , < 3eb0ba70376f6ee40fa843fc9cee49269370b0b3 (git) Affected: 2d281d8196e38dd3a4ee9af26621ddde8329f269 , < 4ebba43384722adbd325baec3a12c572d94488eb (git) Affected: 2d281d8196e38dd3a4ee9af26621ddde8329f269 , < 49a6ffdaed60f0eb52c198fafebc05994e16e305 (git) Affected: 2d281d8196e38dd3a4ee9af26621ddde8329f269 , < 708b9abe1b4a2f050a483db4b7edfc446b13df1f (git) Affected: 2d281d8196e38dd3a4ee9af26621ddde8329f269 , < 139bbbd01114433b80fe59f5e1330615aadf9752 (git) Affected: 2d281d8196e38dd3a4ee9af26621ddde8329f269 , < 6216b685b8f48ab7b721a6fd5acbf526b41c13e8 (git) Affected: 2d281d8196e38dd3a4ee9af26621ddde8329f269 , < 1d94af37565e4d3c26b0d63428e093a37d5b4c32 (git) Affected: 2d281d8196e38dd3a4ee9af26621ddde8329f269 , < 2d93540014387d1c73b9ccc4d7895320df66d01b (git) |
|||||||
|
|||||||||
{
"containers": {
"adp": [
{
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H",
"version": "3.1"
}
},
{
"other": {
"content": {
"id": "CVE-2022-50366",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-01-14T18:34:53.513192Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-125",
"description": "CWE-125 Out-of-bounds Read",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-01-14T18:42:59.069Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "Linux",
"programFiles": [
"drivers/powercap/intel_rapl_common.c"
],
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"vendor": "Linux",
"versions": [
{
"lessThan": "42f79dbb9514f726ff21df25f09cb0693b0b2445",
"status": "affected",
"version": "2d281d8196e38dd3a4ee9af26621ddde8329f269",
"versionType": "git"
},
{
"lessThan": "3eb0ba70376f6ee40fa843fc9cee49269370b0b3",
"status": "affected",
"version": "2d281d8196e38dd3a4ee9af26621ddde8329f269",
"versionType": "git"
},
{
"lessThan": "4ebba43384722adbd325baec3a12c572d94488eb",
"status": "affected",
"version": "2d281d8196e38dd3a4ee9af26621ddde8329f269",
"versionType": "git"
},
{
"lessThan": "49a6ffdaed60f0eb52c198fafebc05994e16e305",
"status": "affected",
"version": "2d281d8196e38dd3a4ee9af26621ddde8329f269",
"versionType": "git"
},
{
"lessThan": "708b9abe1b4a2f050a483db4b7edfc446b13df1f",
"status": "affected",
"version": "2d281d8196e38dd3a4ee9af26621ddde8329f269",
"versionType": "git"
},
{
"lessThan": "139bbbd01114433b80fe59f5e1330615aadf9752",
"status": "affected",
"version": "2d281d8196e38dd3a4ee9af26621ddde8329f269",
"versionType": "git"
},
{
"lessThan": "6216b685b8f48ab7b721a6fd5acbf526b41c13e8",
"status": "affected",
"version": "2d281d8196e38dd3a4ee9af26621ddde8329f269",
"versionType": "git"
},
{
"lessThan": "1d94af37565e4d3c26b0d63428e093a37d5b4c32",
"status": "affected",
"version": "2d281d8196e38dd3a4ee9af26621ddde8329f269",
"versionType": "git"
},
{
"lessThan": "2d93540014387d1c73b9ccc4d7895320df66d01b",
"status": "affected",
"version": "2d281d8196e38dd3a4ee9af26621ddde8329f269",
"versionType": "git"
}
]
},
{
"defaultStatus": "affected",
"product": "Linux",
"programFiles": [
"drivers/powercap/intel_rapl_common.c"
],
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"vendor": "Linux",
"versions": [
{
"status": "affected",
"version": "3.13"
},
{
"lessThan": "3.13",
"status": "unaffected",
"version": "0",
"versionType": "semver"
},
{
"lessThanOrEqual": "4.9.*",
"status": "unaffected",
"version": "4.9.331",
"versionType": "semver"
},
{
"lessThanOrEqual": "4.14.*",
"status": "unaffected",
"version": "4.14.296",
"versionType": "semver"
},
{
"lessThanOrEqual": "4.19.*",
"status": "unaffected",
"version": "4.19.262",
"versionType": "semver"
},
{
"lessThanOrEqual": "5.4.*",
"status": "unaffected",
"version": "5.4.220",
"versionType": "semver"
},
{
"lessThanOrEqual": "5.10.*",
"status": "unaffected",
"version": "5.10.150",
"versionType": "semver"
},
{
"lessThanOrEqual": "5.15.*",
"status": "unaffected",
"version": "5.15.75",
"versionType": "semver"
},
{
"lessThanOrEqual": "5.19.*",
"status": "unaffected",
"version": "5.19.17",
"versionType": "semver"
},
{
"lessThanOrEqual": "6.0.*",
"status": "unaffected",
"version": "6.0.3",
"versionType": "semver"
},
{
"lessThanOrEqual": "*",
"status": "unaffected",
"version": "6.1",
"versionType": "original_commit_for_fix"
}
]
}
],
"cpeApplicability": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionEndExcluding": "4.9.331",
"versionStartIncluding": "3.13",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionEndExcluding": "4.14.296",
"versionStartIncluding": "3.13",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionEndExcluding": "4.19.262",
"versionStartIncluding": "3.13",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionEndExcluding": "5.4.220",
"versionStartIncluding": "3.13",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionEndExcluding": "5.10.150",
"versionStartIncluding": "3.13",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionEndExcluding": "5.15.75",
"versionStartIncluding": "3.13",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionEndExcluding": "5.19.17",
"versionStartIncluding": "3.13",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionEndExcluding": "6.0.3",
"versionStartIncluding": "3.13",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionEndExcluding": "6.1",
"versionStartIncluding": "3.13",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "In the Linux kernel, the following vulnerability has been resolved:\n\npowercap: intel_rapl: fix UBSAN shift-out-of-bounds issue\n\nWhen value \u003c time_unit, the parameter of ilog2() will be zero and\nthe return value is -1. u64(-1) is too large for shift exponent\nand then will trigger shift-out-of-bounds:\n\nshift exponent 18446744073709551615 is too large for 32-bit type \u0027int\u0027\nCall Trace:\n rapl_compute_time_window_core\n rapl_write_data_raw\n set_time_window\n store_constraint_time_window_us"
}
],
"providerMetadata": {
"dateUpdated": "2025-12-23T13:29:05.138Z",
"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"shortName": "Linux"
},
"references": [
{
"url": "https://git.kernel.org/stable/c/42f79dbb9514f726ff21df25f09cb0693b0b2445"
},
{
"url": "https://git.kernel.org/stable/c/3eb0ba70376f6ee40fa843fc9cee49269370b0b3"
},
{
"url": "https://git.kernel.org/stable/c/4ebba43384722adbd325baec3a12c572d94488eb"
},
{
"url": "https://git.kernel.org/stable/c/49a6ffdaed60f0eb52c198fafebc05994e16e305"
},
{
"url": "https://git.kernel.org/stable/c/708b9abe1b4a2f050a483db4b7edfc446b13df1f"
},
{
"url": "https://git.kernel.org/stable/c/139bbbd01114433b80fe59f5e1330615aadf9752"
},
{
"url": "https://git.kernel.org/stable/c/6216b685b8f48ab7b721a6fd5acbf526b41c13e8"
},
{
"url": "https://git.kernel.org/stable/c/1d94af37565e4d3c26b0d63428e093a37d5b4c32"
},
{
"url": "https://git.kernel.org/stable/c/2d93540014387d1c73b9ccc4d7895320df66d01b"
}
],
"title": "powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue",
"x_generator": {
"engine": "bippy-1.2.0"
}
}
},
"cveMetadata": {
"assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"assignerShortName": "Linux",
"cveId": "CVE-2022-50366",
"datePublished": "2025-09-17T14:56:17.441Z",
"dateReserved": "2025-09-17T14:53:06.995Z",
"dateUpdated": "2026-01-14T18:42:59.069Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"vulnerability-lookup:meta": {
"nvd": "{\"cve\":{\"id\":\"CVE-2022-50366\",\"sourceIdentifier\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"published\":\"2025-09-17T15:15:35.467\",\"lastModified\":\"2026-01-14T19:16:09.397\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"In the Linux kernel, the following vulnerability has been resolved:\\n\\npowercap: intel_rapl: fix UBSAN shift-out-of-bounds issue\\n\\nWhen value \u003c time_unit, the parameter of ilog2() will be zero and\\nthe return value is -1. u64(-1) is too large for shift exponent\\nand then will trigger shift-out-of-bounds:\\n\\nshift exponent 18446744073709551615 is too large for 32-bit type \u0027int\u0027\\nCall Trace:\\n rapl_compute_time_window_core\\n rapl_write_data_raw\\n set_time_window\\n store_constraint_time_window_us\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H\",\"baseScore\":7.1,\"baseSeverity\":\"HIGH\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.8,\"impactScore\":5.2},{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H\",\"baseScore\":7.1,\"baseSeverity\":\"HIGH\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.8,\"impactScore\":5.2}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-125\"}]},{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-125\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"4.9.331\",\"matchCriteriaId\":\"F5B7C986-E6CA-41ED-A833-EA73FCF421D4\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"4.10\",\"versionEndExcluding\":\"4.14.296\",\"matchCriteriaId\":\"1927ABC6-E0D2-478F-B103-B982A42D1158\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"4.15\",\"versionEndExcluding\":\"4.19.262\",\"matchCriteriaId\":\"D6B62970-1FAD-4ED6-930A-23E26A8D2E08\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"4.20\",\"versionEndExcluding\":\"5.4.220\",\"matchCriteriaId\":\"125F7133-B3B7-4175-8CF3-FF0845483254\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.5\",\"versionEndExcluding\":\"5.10.150\",\"matchCriteriaId\":\"C495821C-2A71-4F09-BED8-6A6EB4C9BA27\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.11\",\"versionEndExcluding\":\"5.15.75\",\"matchCriteriaId\":\"6D945F46-F32F-4C09-8400-C3477E22A9FB\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.16\",\"versionEndExcluding\":\"5.19.17\",\"matchCriteriaId\":\"19B4C3A4-E5C3-41DC-BB14-BE72858E7D35\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.0\",\"versionEndExcluding\":\"6.0.3\",\"matchCriteriaId\":\"5BCD8201-B847-4442-B894-70D430128DEF\"}]}]}],\"references\":[{\"url\":\"https://git.kernel.org/stable/c/139bbbd01114433b80fe59f5e1330615aadf9752\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/1d94af37565e4d3c26b0d63428e093a37d5b4c32\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/2d93540014387d1c73b9ccc4d7895320df66d01b\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/3eb0ba70376f6ee40fa843fc9cee49269370b0b3\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/42f79dbb9514f726ff21df25f09cb0693b0b2445\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/49a6ffdaed60f0eb52c198fafebc05994e16e305\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/4ebba43384722adbd325baec3a12c572d94488eb\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/6216b685b8f48ab7b721a6fd5acbf526b41c13e8\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/708b9abe1b4a2f050a483db4b7edfc446b13df1f\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]}]}}",
"vulnrichment": {
"containers": "{\"adp\": [{\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"cvssV3_1\": {\"scope\": \"UNCHANGED\", \"version\": \"3.1\", \"baseScore\": 7.1, \"attackVector\": \"LOCAL\", \"baseSeverity\": \"HIGH\", \"vectorString\": \"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H\", \"integrityImpact\": \"NONE\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"LOW\", \"availabilityImpact\": \"HIGH\", \"privilegesRequired\": \"LOW\", \"confidentialityImpact\": \"HIGH\"}}, {\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2022-50366\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2026-01-14T18:34:53.513192Z\"}}}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-125\", \"description\": \"CWE-125 Out-of-bounds Read\"}]}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2026-01-14T18:34:49.314Z\"}}], \"cna\": {\"title\": \"powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue\", \"affected\": [{\"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\", \"vendor\": \"Linux\", \"product\": \"Linux\", \"versions\": [{\"status\": \"affected\", \"version\": \"2d281d8196e38dd3a4ee9af26621ddde8329f269\", \"lessThan\": \"42f79dbb9514f726ff21df25f09cb0693b0b2445\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"2d281d8196e38dd3a4ee9af26621ddde8329f269\", \"lessThan\": \"3eb0ba70376f6ee40fa843fc9cee49269370b0b3\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"2d281d8196e38dd3a4ee9af26621ddde8329f269\", \"lessThan\": \"4ebba43384722adbd325baec3a12c572d94488eb\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"2d281d8196e38dd3a4ee9af26621ddde8329f269\", \"lessThan\": \"49a6ffdaed60f0eb52c198fafebc05994e16e305\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"2d281d8196e38dd3a4ee9af26621ddde8329f269\", \"lessThan\": \"708b9abe1b4a2f050a483db4b7edfc446b13df1f\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"2d281d8196e38dd3a4ee9af26621ddde8329f269\", \"lessThan\": \"139bbbd01114433b80fe59f5e1330615aadf9752\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"2d281d8196e38dd3a4ee9af26621ddde8329f269\", \"lessThan\": \"6216b685b8f48ab7b721a6fd5acbf526b41c13e8\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"2d281d8196e38dd3a4ee9af26621ddde8329f269\", \"lessThan\": \"1d94af37565e4d3c26b0d63428e093a37d5b4c32\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"2d281d8196e38dd3a4ee9af26621ddde8329f269\", \"lessThan\": \"2d93540014387d1c73b9ccc4d7895320df66d01b\", \"versionType\": \"git\"}], \"programFiles\": [\"drivers/powercap/intel_rapl_common.c\"], \"defaultStatus\": \"unaffected\"}, {\"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\", \"vendor\": \"Linux\", \"product\": \"Linux\", \"versions\": [{\"status\": \"affected\", \"version\": \"3.13\"}, {\"status\": \"unaffected\", \"version\": \"0\", \"lessThan\": \"3.13\", \"versionType\": \"semver\"}, {\"status\": \"unaffected\", \"version\": \"4.9.331\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"4.9.*\"}, {\"status\": \"unaffected\", \"version\": \"4.14.296\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"4.14.*\"}, {\"status\": \"unaffected\", \"version\": \"4.19.262\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"4.19.*\"}, {\"status\": \"unaffected\", \"version\": \"5.4.220\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"5.4.*\"}, {\"status\": \"unaffected\", \"version\": \"5.10.150\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"5.10.*\"}, {\"status\": \"unaffected\", \"version\": \"5.15.75\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"5.15.*\"}, {\"status\": \"unaffected\", \"version\": \"5.19.17\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"5.19.*\"}, {\"status\": \"unaffected\", \"version\": \"6.0.3\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"6.0.*\"}, {\"status\": \"unaffected\", \"version\": \"6.1\", \"versionType\": \"original_commit_for_fix\", \"lessThanOrEqual\": \"*\"}], \"programFiles\": [\"drivers/powercap/intel_rapl_common.c\"], \"defaultStatus\": \"affected\"}], \"references\": [{\"url\": \"https://git.kernel.org/stable/c/42f79dbb9514f726ff21df25f09cb0693b0b2445\"}, {\"url\": \"https://git.kernel.org/stable/c/3eb0ba70376f6ee40fa843fc9cee49269370b0b3\"}, {\"url\": \"https://git.kernel.org/stable/c/4ebba43384722adbd325baec3a12c572d94488eb\"}, {\"url\": \"https://git.kernel.org/stable/c/49a6ffdaed60f0eb52c198fafebc05994e16e305\"}, {\"url\": \"https://git.kernel.org/stable/c/708b9abe1b4a2f050a483db4b7edfc446b13df1f\"}, {\"url\": \"https://git.kernel.org/stable/c/139bbbd01114433b80fe59f5e1330615aadf9752\"}, {\"url\": \"https://git.kernel.org/stable/c/6216b685b8f48ab7b721a6fd5acbf526b41c13e8\"}, {\"url\": \"https://git.kernel.org/stable/c/1d94af37565e4d3c26b0d63428e093a37d5b4c32\"}, {\"url\": \"https://git.kernel.org/stable/c/2d93540014387d1c73b9ccc4d7895320df66d01b\"}], \"x_generator\": {\"engine\": \"bippy-1.2.0\"}, \"descriptions\": [{\"lang\": \"en\", \"value\": \"In the Linux kernel, the following vulnerability has been resolved:\\n\\npowercap: intel_rapl: fix UBSAN shift-out-of-bounds issue\\n\\nWhen value \u003c time_unit, the parameter of ilog2() will be zero and\\nthe return value is -1. u64(-1) is too large for shift exponent\\nand then will trigger shift-out-of-bounds:\\n\\nshift exponent 18446744073709551615 is too large for 32-bit type \u0027int\u0027\\nCall Trace:\\n rapl_compute_time_window_core\\n rapl_write_data_raw\\n set_time_window\\n store_constraint_time_window_us\"}], \"cpeApplicability\": [{\"nodes\": [{\"negate\": false, \"cpeMatch\": [{\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"4.9.331\", \"versionStartIncluding\": \"3.13\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"4.14.296\", \"versionStartIncluding\": \"3.13\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"4.19.262\", \"versionStartIncluding\": \"3.13\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"5.4.220\", \"versionStartIncluding\": \"3.13\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"5.10.150\", \"versionStartIncluding\": \"3.13\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"5.15.75\", \"versionStartIncluding\": \"3.13\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"5.19.17\", \"versionStartIncluding\": \"3.13\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.0.3\", \"versionStartIncluding\": \"3.13\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.1\", \"versionStartIncluding\": \"3.13\"}], \"operator\": \"OR\"}]}], \"providerMetadata\": {\"orgId\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"shortName\": \"Linux\", \"dateUpdated\": \"2025-12-23T13:29:05.138Z\"}}}",
"cveMetadata": "{\"cveId\": \"CVE-2022-50366\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2026-01-14T18:42:59.069Z\", \"dateReserved\": \"2025-09-17T14:53:06.995Z\", \"assignerOrgId\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"datePublished\": \"2025-09-17T14:56:17.441Z\", \"assignerShortName\": \"Linux\"}",
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
}
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…