Log in Start free

Vulnerability · Published Sep 18, 2025 · Assigned by Linux

CVE-2022-50407crypto: hisilicon/qm - increase the memory of local variables

Medium 5.5

In plain English

A medium-severity security flaw in Linux from Linux. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 7% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)5.5Medium
Exploit odds (30 days)0.2%top 92.9% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

In the Linux kernel, the following vulnerability has been resolved: crypto: hisilicon/qm - increase the memory of local variables Increase the buffer to prevent stack overflow by fuzz test. The maximum length of the qos configuration buffer is 256 bytes. Currently, the value of the 'val buffer' is only 32 bytes. The sscanf does not check the dest memory length. So the 'val buffer' may stack overflow.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Debian:12linux6.1.4-1DEBIAN-CVE-2022-50407
Debian:13linux6.1.4-1DEBIAN-CVE-2022-50407
Debian:14linux6.1.4-1DEBIAN-CVE-2022-50407
Ubuntu:22.04:LTSlinuxno fix listedUBUNTU-CVE-2022-50407
Ubuntu:22.04:LTSlinux-allwinner-5.19no fix listedUBUNTU-CVE-2022-50407
Ubuntu:22.04:LTSlinux-awsno fix listedUBUNTU-CVE-2022-50407
Ubuntu:22.04:LTSlinux-aws-5.19no fix listedUBUNTU-CVE-2022-50407
Ubuntu:22.04:LTSlinux-aws-6.2no fix listedUBUNTU-CVE-2022-50407
Ubuntu:22.04:LTSlinux-aws-6.5no fix listedUBUNTU-CVE-2022-50407
Ubuntu:22.04:LTSlinux-azureno fix listedUBUNTU-CVE-2022-50407
Ubuntu:22.04:LTSlinux-azure-5.19no fix listedUBUNTU-CVE-2022-50407
Ubuntu:24.04:LTSlinux-azure-6.11no fix listedUBUNTU-CVE-2022-50407
Ubuntu:22.04:LTSlinux-azure-6.2no fix listedUBUNTU-CVE-2022-50407
Ubuntu:22.04:LTSlinux-azure-6.5no fix listedUBUNTU-CVE-2022-50407
Ubuntu:22.04:LTSlinux-azure-fdeno fix listedUBUNTU-CVE-2022-50407
Ubuntu:22.04:LTSlinux-azure-fde-5.19no fix listedUBUNTU-CVE-2022-50407
Ubuntu:22.04:LTSlinux-azure-fde-6.2no fix listedUBUNTU-CVE-2022-50407
Ubuntu:22.04:LTSlinux-gcpno fix listedUBUNTU-CVE-2022-50407
Ubuntu:22.04:LTSlinux-gcp-5.19no fix listedUBUNTU-CVE-2022-50407
Ubuntu:24.04:LTSlinux-gcp-6.11no fix listedUBUNTU-CVE-2022-50407
Ubuntu:22.04:LTSlinux-gcp-6.2no fix listedUBUNTU-CVE-2022-50407
Ubuntu:22.04:LTSlinux-gcp-6.5no fix listedUBUNTU-CVE-2022-50407
Ubuntu:22.04:LTSlinux-gkeno fix listedUBUNTU-CVE-2022-50407
Ubuntu:22.04:LTSlinux-gkeopno fix listedUBUNTU-CVE-2022-50407
Ubuntu:22.04:LTSlinux-hwe-5.19no fix listedUBUNTU-CVE-2022-50407
Ubuntu:24.04:LTSlinux-hwe-6.11no fix listedUBUNTU-CVE-2022-50407
Ubuntu:22.04:LTSlinux-hwe-6.2no fix listedUBUNTU-CVE-2022-50407
Ubuntu:22.04:LTSlinux-hwe-6.5no fix listedUBUNTU-CVE-2022-50407
Ubuntu:22.04:LTSlinux-ibmno fix listedUBUNTU-CVE-2022-50407
Ubuntu:24.04:LTSlinux-intelno fix listedUBUNTU-CVE-2022-50407
Ubuntu:22.04:LTSlinux-intel-iot-realtimeno fix listedUBUNTU-CVE-2022-50407
Ubuntu:22.04:LTSlinux-intel-iotgno fix listedUBUNTU-CVE-2022-50407
Ubuntu:22.04:LTSlinux-kvmno fix listedUBUNTU-CVE-2022-50407
Ubuntu:22.04:LTSlinux-lowlatencyno fix listedUBUNTU-CVE-2022-50407
Ubuntu:22.04:LTSlinux-lowlatency-hwe-5.19no fix listedUBUNTU-CVE-2022-50407
Ubuntu:24.04:LTSlinux-lowlatency-hwe-6.11no fix listedUBUNTU-CVE-2022-50407
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.2no fix listedUBUNTU-CVE-2022-50407
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.5no fix listedUBUNTU-CVE-2022-50407
Ubuntu:22.04:LTSlinux-nvidiano fix listedUBUNTU-CVE-2022-50407
Ubuntu:22.04:LTSlinux-nvidia-6.2no fix listedUBUNTU-CVE-2022-50407
Ubuntu:22.04:LTSlinux-nvidia-6.5no fix listedUBUNTU-CVE-2022-50407
Ubuntu:22.04:LTSlinux-nvidia-tegrano fix listedUBUNTU-CVE-2022-50407
Ubuntu:22.04:LTSlinux-nvidia-tegra-igxno fix listedUBUNTU-CVE-2022-50407
Ubuntu:22.04:LTSlinux-oem-5.17no fix listedUBUNTU-CVE-2022-50407
Ubuntu:22.04:LTSlinux-oem-6.0no fix listedUBUNTU-CVE-2022-50407
Ubuntu:22.04:LTSlinux-oem-6.1no fix listedUBUNTU-CVE-2022-50407
Ubuntu:24.04:LTSlinux-oem-6.11no fix listedUBUNTU-CVE-2022-50407
Ubuntu:22.04:LTSlinux-oem-6.5no fix listedUBUNTU-CVE-2022-50407
Ubuntu:24.04:LTSlinux-oem-6.8no fix listedUBUNTU-CVE-2022-50407
Ubuntu:22.04:LTSlinux-oracleno fix listedUBUNTU-CVE-2022-50407
Ubuntu:22.04:LTSlinux-oracle-6.5no fix listedUBUNTU-CVE-2022-50407
Ubuntu:22.04:LTSlinux-raspino fix listedUBUNTU-CVE-2022-50407
Ubuntu:24.04:LTSlinux-raspi-realtimeno fix listedUBUNTU-CVE-2022-50407
Ubuntu:22.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2022-50407
Ubuntu:24.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2022-50407
Ubuntu:22.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2022-50407
Ubuntu:24.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2022-50407
Ubuntu:22.04:LTSlinux-riscv-5.19no fix listedUBUNTU-CVE-2022-50407
Ubuntu:22.04:LTSlinux-riscv-6.5no fix listedUBUNTU-CVE-2022-50407
Ubuntu:22.04:LTSlinux-starfive-5.19no fix listedUBUNTU-CVE-2022-50407
Ubuntu:22.04:LTSlinux-starfive-6.2no fix listedUBUNTU-CVE-2022-50407
Ubuntu:22.04:LTSlinux-starfive-6.5no fix listedUBUNTU-CVE-2022-50407
Ubuntu:22.04:LTSlinux-xilinx-zynqmpno fix listedUBUNTU-CVE-2022-50407

Affected products (as reported)

VendorProductVersions
Linux Linux 72b010dc33b9598883bc84d40b0a9d07c16f5e39 – before 34c4f8ad45b4ea814c7ecc3f23a2d292959d5a5272b010dc33b9598883bc84d40b0a9d07c16f5e39 – before fc521abb6ee4b8f06fdfc52646140dab6a2ed33472b010dc33b9598883bc84d40b0a9d07c16f5e39 – before 3efe90af4c0c46c58dba1b306de142827153d9c0
Linux Linux 5.14

Weakness: CWE-674 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

References