CVE-2022-50649

power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()

N/A
Published: December 9, 2025 at 12:00 AM UTC
Updated: June 17, 2026 at 05:23 AM UTC
1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Severity
N/A
Exploit prediction
EPSS 0.2%

Description

In the Linux kernel, the following vulnerability has been resolved: power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type() ADP5061_CHG_STATUS_1_CHG_STATUS is masked with 0x07, which means a length of 8, but adp5061_chg_type array size is 4, may end up reading 4 elements beyond the end of the adp5061_chg_type[] array.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

4.19 ≤ v < 4.19.2624.19 ≤ v < 5.10.1504.19 ≤ v < 5.15.754.19 ≤ v < 5.19.174.19 ≤ v < 5.4.2204.19 ≤ v < 6.0.34.19 ≤ v < 6.14.19fe8e81b7e899968690e5e87c25727178921b5b9a
Vendor states this is fixed in 038e4aa71281d0cbc8aeb56ba05ff7fc5653a106 (fixed)
Vendor states this is fixed in 24a0be36e9a21f63de2e6088607e689e59ec15f4 (fixed)
Vendor states this is fixed in 3376a0cf138dfc90b449fde541ca228a33e1c143 (fixed)
Vendor states this is fixed in 7c8bc374659de19d846f7cab3eda9ebdb005c4cc (fixed)
Vendor states this is fixed in 89f305a71418591cdda18180f712f91c9820f03b (fixed)
Vendor states this is fixed in 9d47e01b9d807808224347935562f7043a358054 (fixed)
Vendor states this is fixed in dc52b73d3acd676ccbb440fcec617c547b903af2 (fixed)
Vendor states this is fixed in 4.19 (unaffected)
Vendor states this is fixed in 4.19.262 (unaffected)
Vendor states this is fixed in 5.10.150 (unaffected)
Vendor states this is fixed in 5.15.75 (unaffected)
Vendor states this is fixed in 5.19.17 (unaffected)
Vendor states this is fixed in 5.4.220 (unaffected)
Vendor states this is fixed in 6.0.3 (unaffected)
Vendor states this is fixed in 6.1 (unaffected)

Remediation

No guide yet

No remediation guidance has been written for this CVE yet, and no fixed version or vendor advisory is recorded against it.

Quick Info

StatusDEFERRED

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Free plan, no card