In the Linux kernel, the following vulnerability has been resolved:
powercap: intel_rapl: Fix off by one in get_rpi()
The rp->priv->rpi array is either rpi_msr or rpi_tpmi which have NR_RAPL_PRIMITIVES number of elements. Thus the > needs to be >= to prevent an off by one access.
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 27, 2026 | Jul 27, 2026 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | May 15, 2025 | Oct 21, 2024 |
| Ubuntu | — | Upgrade linux-image-6.8.0-54-lowlatency-64kUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.11.0-1010-lowlatency-64kUpgrade linux-image-6.8.0-1020-oracleUpgrade linux-image-6.8.0-1019-raspiUpgrade linux-image-6.8.0-54-lowlatencyUpgrade linux-image-oem-22.04dUpgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-1019-gkeUpgrade linux-image-aws-lts-24.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-oracle-64kUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-gcp-64kUpgrade linux-image-6.11.0-1010-lowlatencyUpgrade linux-image-6.8.0-1006-gkeopUpgrade linux-image-6.8.0-1024-gcp-64kUpgrade linux-image-realtimeUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-awsUpgrade linux-image-ibm-classicUpgrade linux-image-kvmUpgrade linux-image-oem-22.04bUpgrade linux-image-raspiUpgrade linux-image-azureUpgrade linux-image-6.11.0-1011-oracleUpgrade linux-image-6.8.0-1025-azure-fdeUpgrade linux-image-6.8.0-1022-ibmUpgrade linux-image-gcpUpgrade linux-image-6.8.0-1022-nvidia-lowlatency-64kUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-6.11.0-1015-oemUpgrade linux-image-6.8.0-1024-oemUpgrade linux-image-azure-fdeUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-oem-22.04cUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-oem-24.04aUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-6.8.0-1022-nvidia-64kUpgrade linux-image-6.8.0-1024-gcpUpgrade linux-image-6.11.0-18-genericUpgrade linux-image-nvidia-6.8Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.0-54-generic-64kUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.11.0-18-generic-64kUpgrade linux-image-6.8.0-1022-nvidiaUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.8.0-1023-awsUpgrade linux-image-6.8.0-57-genericUpgrade linux-image-nvidiaUpgrade linux-image-gkeopUpgrade linux-image-6.11.0-1008-raspiUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-lowlatencyUpgrade linux-image-6.11.0-1011-oracle-64kUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-6.11.0-1009-gcpUpgrade linux-image-6.11.0-1005-realtimeUpgrade linux-image-ibmUpgrade linux-image-6.11.0-1009-azureUpgrade linux-image-lowlatency-64kUpgrade linux-image-oem-24.04Upgrade linux-image-6.8.0-1022-nvidia-lowlatencyUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-azure-lts-24.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-genericUpgrade linux-image-6.8.0-1025-azureUpgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-54-genericUpgrade linux-image-gkeop-6.8Upgrade linux-image-virtualUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-gkeUpgrade linux-image-oem-22.04aUpgrade linux-image-6.8.0-1020-oracle-64kUpgrade linux-image-6.11.0-1009-azure-fdeUpgrade linux-image-6.11.0-1009-awsUpgrade linux-image-6.8.0-57-generic-64kUpgrade linux-image-oem-24.04bUpgrade linux-image-oem-22.04Upgrade linux-image-oracleUpgrade linux-image-generic-64k | Feb 20, 2025 | Oct 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub