Description
In the Linux kernel, the following vulnerability has been resolved: ACPI: CPPC: Avoid out of bounds access when parsing _CPC data If the NumEntries field in the _CPC return package is less than 2, do not attempt to access the "Revision" element of that package, because it may not be present then. BugLink: https://lore.kernel.org/lkml/20220322143534.GC32582@xsang-OptiPlex-9020/
References (9)
Core 9
Core References
Scores
CVSS v3
7.1
EPSS
0.0001
EPSS Percentile
2.0%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Details
CWE
CWE-125
Status
published
Products (9)
linux/Kernel
4.10.0 - 4.14.276linux
linux/Kernel
4.15.0 - 4.19.238linux
linux/Kernel
4.20.0 - 5.4.189linux
linux/Kernel
4.4.0 - 4.9.311linux
linux/Kernel
5.11.0 - 5.15.33linux
linux/Kernel
5.16.0 - 5.16.19linux
linux/Kernel
5.17.0 - 5.17.2linux
linux/Kernel
5.5.0 - 5.10.110linux
linux/linux_kernel
4.4 - 4.9.311
Published
Feb 26, 2025
Tracked Since
Feb 18, 2026