CVE-2022-50763

crypto: marvell/octeontx - prevent integer overflows

published December 24, 2025

CVSS
—
EPSS
0%
Percentile
16.6
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

crypto: marvell/octeontx - prevent integer overflows

The "code_length" value comes from the firmware file. If your firmware

is untrusted realistically there is probably very little you can do to

protect yourself. Still we try to limit the damage as much as possible.

Also Smatch marks any data read from the filesystem as untrusted and

prints warnings if it not capped correctly.

The "code_length * 2" can overflow. The round_up(ucode_size, 16) +

sizeof() expression can overflow too. Prevent these overflows.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00259 · 16.6th percentile
Published
2025-12-24T13:05Z
EPSS history
Timeline
  • 24 DEC 13:05Z
    crypto: marvell/octeontx - prevent integer overflows
    cvelistv5