CVE-2024-49862

A flaw was found in the intel_rapl driver within the powercap subsystem of the Linux kernel. An off-by-one error in the get_rpi() function, caused by an incorrect array boundary check, could allow a local attacker to perform an out-of-bounds read or write. This vulnerability may lead to information disclosure or a denial of service (DoS) on the affected system.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

To mitigate this vulnerability, prevent the intel_rapl kernel module from loading if Intel Running Average Power Limit (RAPL) power capping features are not required. Create a file /etc/modprobe.d/blacklist-intel_rapl.conf with the content blacklist intel_rapl. A system reboot is required for this change to take effect. Disabling this module may impact power management features on systems utilizing Intel RAPL.