Back
CVE-2022-49145
ACPI: CPPC: Avoid out of bounds access when parsing _CPC data
High7.1EPSS 0.28%
- Published
- Updated
- Reserved
- Assigned by
- Linux
Description
In the Linux kernel, the following vulnerability has been resolved: ACPI: CPPC: Avoid out of bounds access when parsing _CPC data If the NumEntries field in the _CPC return package is less than 2, do not attempt to access the "Revision" element of that package, because it may not be present then. BugLink: https://lore.kernel.org/lkml/20220322143534.GC32582@xsang-OptiPlex-9020/
Scores
| Scored by | CVSS | Score | Vector |
|---|---|---|---|
| NVDNVD · Analyzed | 3.1 | High7.1 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H |
- EPSS (exploitation in 30 days)
- 0.28% · top 79% of all CVEs (6 Nov 2026)
Loading the EPSS history…
The list uses the assigner's score when there is one, then CISA's, then NVD's: High 7.1.
Weakness
Affected products
- affected 337aadff8e4567e39669e07d9a88b789d78458b5 – < b3f15609ffa521de12244cd6af24002030dda3f5
- affected 337aadff8e4567e39669e07d9a88b789d78458b5 – < d208ea44e25b31db5a4d5e8c31df51787a3e9303
- affected 337aadff8e4567e39669e07d9a88b789d78458b5 – < 28d5387c1994f5e1e0d41b30a1f3dd6e1f609252
- affected 337aadff8e4567e39669e07d9a88b789d78458b5 – < cb249f8c00f40dba83b7da8207ac14ca46e9ec9e
- affected 337aadff8e4567e39669e07d9a88b789d78458b5 – < e5b681822cac1f8093759b02e16c06b2c64b6788
- affected 337aadff8e4567e39669e07d9a88b789d78458b5 – < 97b5593fd1b182b3fdb180b6bbe64ec09669988b
- affected 337aadff8e4567e39669e07d9a88b789d78458b5 – < b80b19b32a432c9eee1cd200ef7aaddf608f54d1
- affected 337aadff8e4567e39669e07d9a88b789d78458b5 – < d7339f2a3938fb56b5f28d53f5345900b5fa0e74
- affected 337aadff8e4567e39669e07d9a88b789d78458b5 – < 40d8abf364bcab23bc715a9221a3c8623956257b
- affected 4.4
- unaffected < 4.4
- unaffected 4.9.311 – ≤ 4.9.*
- unaffected 4.14.276 – ≤ 4.14.*
- unaffected 4.19.238 – ≤ 4.19.*
- unaffected 5.4.189 – ≤ 5.4.*
- unaffected 5.10.110 – ≤ 5.10.*
- unaffected 5.15.33 – ≤ 5.15.*
- unaffected 5.16.19 – ≤ 5.16.*
- unaffected 5.17.2 – ≤ 5.17.*
- unaffected 5.18 – ≤ *
References (9)
- https://git.kernel.org/stable/c/b3f15609ffa521de12244cd6af24002030dda3f5 (opens in a new tab)
- https://git.kernel.org/stable/c/d208ea44e25b31db5a4d5e8c31df51787a3e9303 (opens in a new tab)
- https://git.kernel.org/stable/c/28d5387c1994f5e1e0d41b30a1f3dd6e1f609252 (opens in a new tab)
- https://git.kernel.org/stable/c/cb249f8c00f40dba83b7da8207ac14ca46e9ec9e (opens in a new tab)
- https://git.kernel.org/stable/c/e5b681822cac1f8093759b02e16c06b2c64b6788 (opens in a new tab)
- https://git.kernel.org/stable/c/97b5593fd1b182b3fdb180b6bbe64ec09669988b (opens in a new tab)
- https://git.kernel.org/stable/c/b80b19b32a432c9eee1cd200ef7aaddf608f54d1 (opens in a new tab)
- https://git.kernel.org/stable/c/d7339f2a3938fb56b5f28d53f5345900b5fa0e74 (opens in a new tab)
- https://git.kernel.org/stable/c/40d8abf364bcab23bc715a9221a3c8623956257b (opens in a new tab)
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisories (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Badge for a README or a ticket
[](https://trackcve.app/cve/CVE-2022-49145)Record last updated .