Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2022-50366— powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue

Quick assessment

Affected
Linux Linux
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞，该漏洞源于未正确处理ilog2参数，可能导致越界移位。

AI Predicted 5.5 Difficulty: Moderate EPSS 0.22% · P12

Possible ATT&CK Techniques 1 AI

T1068 · Exploitation for Privilege Escalation

Affected Version Matrix 20

VendorProduct Version RangeStatus
Linux Linux 2d281d8196e38dd3a4ee9af26621ddde8329f269< 42f79dbb9514f726ff21df25f09cb0693b0b2445 affected
2d281d8196e38dd3a4ee9af26621ddde8329f269< 3eb0ba70376f6ee40fa843fc9cee49269370b0b3 affected
2d281d8196e38dd3a4ee9af26621ddde8329f269< 4ebba43384722adbd325baec3a12c572d94488eb affected
2d281d8196e38dd3a4ee9af26621ddde8329f269< 49a6ffdaed60f0eb52c198fafebc05994e16e305 affected
2d281d8196e38dd3a4ee9af26621ddde8329f269< 708b9abe1b4a2f050a483db4b7edfc446b13df1f affected
2d281d8196e38dd3a4ee9af26621ddde8329f269< 139bbbd01114433b80fe59f5e1330615aadf9752 affected
2d281d8196e38dd3a4ee9af26621ddde8329f269< 6216b685b8f48ab7b721a6fd5acbf526b41c13e8 affected
2d281d8196e38dd3a4ee9af26621ddde8329f269< 1d94af37565e4d3c26b0d63428e093a37d5b4c32 affected
… +12 more rows
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2022-50366

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
Source: CVE Program / CVE List V5
Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue When value < time_unit, the parameter of ilog2() will be zero and the return value is -1. u64(-1) is too large for shift exponent and then will trigger shift-out-of-bounds: shift exponent 18446744073709551615 is too large for 32-bit type 'int' Call Trace: rapl_compute_time_window_core rapl_write_data_raw set_time_window store_constraint_time_window_us
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Linux kernel 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞，该漏洞源于未正确处理ilog2参数，可能导致越界移位。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
Linux Linux 2d281d8196e38dd3a4ee9af26621ddde8329f269 ~ 42f79dbb9514f726ff21df25f09cb0693b0b2445 -
Linux Linux 3.13 -

II. Public POCs for CVE-2022-50366

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2022-50366

请登录查看更多情报信息。

Same Patch Batch · Linux · 2025-09-17 · 56 CVEs total

CVE-2023-53338 9.8 CRITICAL lwt: Fix return values of BPF xmit ops
CVE-2023-53360 9.8 CRITICAL NFSv4.2: Rework scratch handling for READ_PLUS (again)
CVE-2022-50363 9.8 CRITICAL skmsg: pass gfp argument to alloc_sk_msg()
CVE-2022-50373 9.8 CRITICAL fs: dlm: fix race in lowcomms
CVE-2023-53358 8.8 HIGH ksmbd: fix racy issue under cocurrent smb2 tree disconnect
CVE-2022-50368 7.8 HIGH drm/msm/dsi: fix memory corruption with too many bridges
CVE-2022-50367 7.8 HIGH fs: fix UAF/GPF bug in nilfs_mdt_destroy
CVE-2023-53340 7.8 HIGH net/mlx5: Collect command failures data only for known commands
CVE-2022-50362 7.8 HIGH dmaengine: hisilicon: Add multi-thread support for a DMA channel
CVE-2023-53354 7.8 HIGH skbuff: skb_segment, Call zero copy functions before using skbuff frags
CVE-2022-50355 7.8 HIGH staging: vt6655: fix some erroneous memory clean-up loops
CVE-2022-50354 7.8 HIGH drm/amdkfd: Fix kfd_process_device_init_vm error handling
CVE-2023-53335 7.5 HIGH RDMA/cxgb4: Fix potential null-ptr-deref in pass_establish()
CVE-2022-50365 7.5 HIGH skbuff: Account for tail adjustment during pull operations
CVE-2022-50374 Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
CVE-2022-50353 mmc: wmt-sdmmc: fix return value check of mmc_add_host()
CVE-2023-53337 nilfs2: do not write dirty data after degenerating to read-only
CVE-2022-50372 cifs: Fix memory leak when build ntlmssp negotiate blob failed
CVE-2022-50370 i2c: designware: Fix handling of real but unexpected device interrupts
CVE-2022-50371 led: qcom-lpg: Fix sleeping in atomic

Showing top 20 of 56 CVEs. View all on vendor page &rarr; →

IV. Related Vulnerabilities

Same product: Linux
Same vendor: Linux

V. Comments for CVE-2022-50366

No comments yet

Leave a comment