PT-2025-38176 · Linux+1 · Linux Kernel+1

Published 2022-09-21 · Updated 2025-09-17 · CVE-2022-50366

Positive Technologies (AI Summary)

CVSS v3.1

7.1

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel contains a flaw within the powercap and intel rapl components. A shift-out-of-bounds issue occurs when a value is less than the time unit, leading to an excessively large shift exponent during the ilog2() function call. This can trigger an error when calculating the time window core in the rapl compute time window core() function, and subsequently during rapl write data raw() and set time window() operations.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Out of bounds Read

Unchecked Return Value

Weakness Enumeration

CWE-125

CWE-252

Related Identifiers

BDU:2026-02259

CVE-2022-50366

Affected Products

Astra Linux

Linux Kernel

References · 30

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/50xxx/CVE-2022-50366.json · Exploit
• https://git.kernel.org/stable/c/139bbbd01114433b80fe59f5e1330615aadf9752 · Patch
• https://git.kernel.org/stable/c/2d93540014387d1c73b9ccc4d7895320df66d01b · Patch
• https://git.kernel.org/stable/c/49a6ffdaed60f0eb52c198fafebc05994e16e305 · Patch
• https://git.kernel.org/stable/c/1d94af37565e4d3c26b0d63428e093a37d5b4c32 · Patch
• https://cve.org/CVERecord?id=CVE-2022-50366 · Security Note
• https://git.kernel.org/stable/c/42f79dbb9514f726ff21df25f09cb0693b0b2445 · Patch
• https://security-tracker.debian.org/tracker/CVE-2022-50366 · Vendor Advisory
• https://git.kernel.org/stable/c/3eb0ba70376f6ee40fa843fc9cee49269370b0b3 · Patch
• https://git.kernel.org/stable/c/4ebba43384722adbd325baec3a12c572d94488eb · Patch
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-50366 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-50366 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-50366 · Vendor Advisory
• https://git.kernel.org/stable/c/6216b685b8f48ab7b721a6fd5acbf526b41c13e8 · Patch
• https://bdu.fstec.ru/vul/2026-02259 · Security Note