CVE-2022-50366
published 2025-09-17CVE-2022-50366: In the Linux kernel, the following vulnerability has been resolved: powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue When value < time_unit, the…
PriorityP429high7.1CVSS 3.1
AVLACLPRLUINSUCHINAH
EPSS
0.20%
10.1th percentile
In the Linux kernel, the following vulnerability has been resolved:
powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
When value < time_unit, the parameter of ilog2() will be zero and
the return value is -1. u64(-1) is too large for shift exponent
and then will trigger shift-out-of-bounds:
shift exponent 18446744073709551615 is too large for 32-bit type 'int'
Call Trace:
rapl_compute_time_window_core
rapl_write_data_raw
set_time_window
store_constraint_time_window_us
Affected
23 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 6.0.3-1 (bookworm) | linux 6.0.3-1 (bookworm) |
| linux | linux | — | — |
| linux | linux | >= 2d281d8196e38dd3a4ee9af26621ddde8329f269 < 42f79dbb9514f726ff21df25f09cb0693b0b2445 | 42f79dbb9514f726ff21df25f09cb0693b0b2445 |
| linux | linux | >= 2d281d8196e38dd3a4ee9af26621ddde8329f269 < 3eb0ba70376f6ee40fa843fc9cee49269370b0b3 | 3eb0ba70376f6ee40fa843fc9cee49269370b0b3 |
| linux | linux | >= 2d281d8196e38dd3a4ee9af26621ddde8329f269 < 4ebba43384722adbd325baec3a12c572d94488eb | 4ebba43384722adbd325baec3a12c572d94488eb |
| linux | linux | >= 2d281d8196e38dd3a4ee9af26621ddde8329f269 < 49a6ffdaed60f0eb52c198fafebc05994e16e305 | 49a6ffdaed60f0eb52c198fafebc05994e16e305 |
| linux | linux | >= 2d281d8196e38dd3a4ee9af26621ddde8329f269 < 708b9abe1b4a2f050a483db4b7edfc446b13df1f | 708b9abe1b4a2f050a483db4b7edfc446b13df1f |
| linux | linux | >= 2d281d8196e38dd3a4ee9af26621ddde8329f269 < 139bbbd01114433b80fe59f5e1330615aadf9752 | 139bbbd01114433b80fe59f5e1330615aadf9752 |
| linux | linux | >= 2d281d8196e38dd3a4ee9af26621ddde8329f269 < 6216b685b8f48ab7b721a6fd5acbf526b41c13e8 | 6216b685b8f48ab7b721a6fd5acbf526b41c13e8 |
| linux | linux | >= 2d281d8196e38dd3a4ee9af26621ddde8329f269 < 1d94af37565e4d3c26b0d63428e093a37d5b4c32 | 1d94af37565e4d3c26b0d63428e093a37d5b4c32 |
| linux | linux | >= 2d281d8196e38dd3a4ee9af26621ddde8329f269 < 2d93540014387d1c73b9ccc4d7895320df66d01b | 2d93540014387d1c73b9ccc4d7895320df66d01b |
| linux | linux_kernel | < 4.9.331 | 4.9.331 |
| linux | linux_kernel | >= 0 < 5.10.158-1 | 5.10.158-1 |
| linux | linux_kernel | >= 0 < 6.0.3-1 | 6.0.3-1 |
| linux | linux_kernel | >= 0 < 6.0.3-1 | 6.0.3-1 |
| linux | linux_kernel | >= 0 < 6.0.3-1 | 6.0.3-1 |
| linux | linux_kernel | >= 4.10 < 4.14.296 | 4.14.296 |
| linux | linux_kernel | >= 4.15 < 4.19.262 | 4.19.262 |
| linux | linux_kernel | >= 4.20 < 5.4.220 | 5.4.220 |
| linux | linux_kernel | >= 5.11 < 5.15.75 | 5.15.75 |
| linux | linux_kernel | >= 5.16 < 5.19.17 | 5.19.17 |
| linux | linux_kernel | >= 5.5 < 5.10.150 | 5.10.150 |
| linux | linux_kernel | >= 6.0 < 6.0.3 | 6.0.3 |
CVSS provenance
nvdv3.17.1HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
osv7.1HIGH
vendor_debian7.1HIGH
vendor_redhat7.1HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
OSV
CVE-2022-50366: In the Linux kernel, the following vulnerability has been resolved: powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue When value < time_unit,
osv·2025-09-17·CVSS 7.1
CVE-2022-50366 [HIGH] CVE-2022-50366: In the Linux kernel, the following vulnerability has been resolved: powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue When value < time_unit,
In the Linux kernel, the following vulnerability has been resolved: powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue When value < time_unit, the parameter of ilog2() will be zero and the return value is -1. u64(-1) is too large for shift exponent and then will trigger shift-out-of-bounds: shift exponent 18446744073709551615 is too large for 32-bit type 'int' Call Trace: rapl_compute_time_window_core rapl_write_data_raw set_time_window store_constraint_time_window_us
GHSA
GHSA-pvwj-2m48-hxq3: In the Linux kernel, the following vulnerability has been resolved:
powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
When value < time_unit
ghsa_unreviewed·2025-09-17
CVE-2022-50366 [HIGH] CWE-125 GHSA-pvwj-2m48-hxq3: In the Linux kernel, the following vulnerability has been resolved:
powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
When value < time_unit
In the Linux kernel, the following vulnerability has been resolved:
powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
When value < time_unit, the parameter of ilog2() will be zero and
the return value is -1. u64(-1) is too large for shift exponent
and then will trigger shift-out-of-bounds:
shift exponent 18446744073709551615 is too large for 32-bit type 'int'
Call Trace:
rapl_compute_time_window_core
rapl_write_data_raw
set_time_window
store_constraint_time_window_us
Red Hat
kernel: powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
vendor_redhat·2025-09-17·CVSS 7.1
CVE-2022-50366 [HIGH] CWE-190 kernel: powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
kernel: powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
In the Linux kernel, the following vulnerability has been resolved:
powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
When value < time_unit, the parameter of ilog2() will be zero and
the return value is -1. u64(-1) is too large for shift exponent
and then will trigger shift-out-of-bounds:
shift exponent 18446744073709551615 is too large for 32-bit type 'int'
Call Trace:
rapl_compute_time_window_core
rapl_write_data_raw
set_time_window
store_constraint_time_window_us
Statement: This patch fixes a shift-out-of-bounds bug in the Intel RAPL driver when value < time_unit, which previously caused ilog2(0) to return -1. While not exploitable remotely, a local user with write access to RAPL sysfs controls could trigger a
Debian
CVE-2022-50366: linux - In the Linux kernel, the following vulnerability has been resolved: powercap: i...
vendor_debian·2022·CVSS 7.1
CVE-2022-50366 [HIGH] CVE-2022-50366: linux - In the Linux kernel, the following vulnerability has been resolved: powercap: i...
In the Linux kernel, the following vulnerability has been resolved: powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue When value < time_unit, the parameter of ilog2() will be zero and the return value is -1. u64(-1) is too large for shift exponent and then will trigger shift-out-of-bounds: shift exponent 18446744073709551615 is too large for 32-bit type 'int' Call Trace: rapl_compute_time_window_core rapl_write_data_raw set_time_window store_constraint_time_window_us
Scope: local
bookworm: resolved (fixed in 6.0.3-1)
bullseye: resolved (fixed in 5.10.158-1)
forky: resolved (fixed in 6.0.3-1)
sid: resolved (fixed in 6.0.3-1)
trixie: resolved (fixed in 6.0.3-1)
No detection rules found.
No public exploits indexed.
https://git.kernel.org/stable/c/139bbbd01114433b80fe59f5e1330615aadf9752https://git.kernel.org/stable/c/1d94af37565e4d3c26b0d63428e093a37d5b4c32https://git.kernel.org/stable/c/2d93540014387d1c73b9ccc4d7895320df66d01bhttps://git.kernel.org/stable/c/3eb0ba70376f6ee40fa843fc9cee49269370b0b3https://git.kernel.org/stable/c/42f79dbb9514f726ff21df25f09cb0693b0b2445https://git.kernel.org/stable/c/49a6ffdaed60f0eb52c198fafebc05994e16e305https://git.kernel.org/stable/c/4ebba43384722adbd325baec3a12c572d94488ebhttps://git.kernel.org/stable/c/6216b685b8f48ab7b721a6fd5acbf526b41c13e8https://git.kernel.org/stable/c/708b9abe1b4a2f050a483db4b7edfc446b13df1f
2025-09-17
Published