CVE-2022-50407

crypto: hisilicon/qm - increase the memory of local variables

State: Published
Severity: 5.5 Medium
Published: Sep 18, 2025
Updated: Aug 15, 2026
Reserved: Sep 17, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

crypto: hisilicon/qm - increase the memory of local variables

Increase the buffer to prevent stack overflow by fuzz test. The maximum length of the qos configuration buffer is 256 bytes. Currently, the value of the 'val buffer' is only 32 bytes. The sscanf does not check the dest memory length. So the 'val buffer' may stack overflow.

Scores

CVSS	Score	Vector	Source
3.1	5.5 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	CISA-ADP

Weaknesses

CWE-674 Uncontrolled Recursion

Affected Products

Product	Versions
LinuxLinux	72b010dc33b9598883bc84d40b0a9d07c16f5e39 to before 34c4f8ad45b4ea814c7ecc3f23a2d292959d5a52Affected 72b010dc33b9598883bc84d40b0a9d07c16f5e39 to before fc521abb6ee4b8f06fdfc52646140dab6a2ed334Affected 72b010dc33b9598883bc84d40b0a9d07c16f5e39 to before 3efe90af4c0c46c58dba1b306de142827153d9c0Affected
LinuxLinux	5.14Affected before 5.14Not affected 6.0.16 through 6.0.Not affected 6.1.2 through 6.1.Not affected 6.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.