CVE-2022-50407CWE-674

CVE-2022-50407

Medium · published September 18, 2025

CVSS v3.1
5.5
EPSS
0%
Percentile
6.6
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

crypto: hisilicon/qm - increase the memory of local variables

Increase the buffer to prevent stack overflow by fuzz test. The maximum

length of the qos configuration buffer is 256 bytes. Currently, the value

of the 'val buffer' is only 32 bytes. The sscanf does not check the dest

memory length. So the 'val buffer' may stack overflow.

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00175 · 6.6th percentile
Weakness
CWE-674 · Uncontrolled Recursion
Published
2025-09-18T20:15Z
Affected products (2)
ProductVersionsFixed in
linux/linux_kernel≥ 5.4, < 6.0.166.0.16
linux/linux_kernel≥ 6.1, < 6.1.26.1.2
References (3)
EPSS history
Timeline
  • 18 SEP 16:03Z
    crypto: hisilicon/qm - increase the memory of local variables
    cvelistv5