CVE-2022-50623

fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()

State: Published
Severity: 7.8 High
Published: Dec 8, 2025
Updated: Aug 5, 2026
Reserved: Dec 8, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()

The "hdr.count * sizeof(s32)" multiplication can overflow on 32 bit systems leading to memory corruption. Use array_size() to fix that.

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	322b598be4d9b9090cda560c4caab78704615ab4 to before f59861946fa51bcc1f305809e4ebc1013b0ee61cAffected 322b598be4d9b9090cda560c4caab78704615ab4 to before b94605f5cb99e90c8ca91523597a40e1bd59546bAffected 322b598be4d9b9090cda560c4caab78704615ab4 to before 1b5a931594f7ffd26d706614c37d4da0f2ffb6e7Affected 322b598be4d9b9090cda560c4caab78704615ab4 to before 940253af8b3865b76de8d1b46bcd4a700104852eAffected 322b598be4d9b9090cda560c4caab78704615ab4 to before 939bc5453b8cbdde9f1e5110ce8309aedb1b501aAffected
LinuxLinux	5.9Affected before 5.9Not affected 5.10.150 through 5.10.Not affected 5.15.75 through 5.15.Not affected 5.19.17 through 5.19.Not affected 6.0.3 through 6.0.Not affected 6.1 and laterNot affected

Product

Versions

LinuxLinux

322b598be4d9b9090cda560c4caab78704615ab4 to before f59861946fa51bcc1f305809e4ebc1013b0ee61cAffected
322b598be4d9b9090cda560c4caab78704615ab4 to before b94605f5cb99e90c8ca91523597a40e1bd59546bAffected
322b598be4d9b9090cda560c4caab78704615ab4 to before 1b5a931594f7ffd26d706614c37d4da0f2ffb6e7Affected
322b598be4d9b9090cda560c4caab78704615ab4 to before 940253af8b3865b76de8d1b46bcd4a700104852eAffected
322b598be4d9b9090cda560c4caab78704615ab4 to before 939bc5453b8cbdde9f1e5110ce8309aedb1b501aAffected

LinuxLinux

5.9Affected
before 5.9Not affected
5.10.150 through 5.10.*Not affected
5.15.75 through 5.15.*Not affected
5.19.17 through 5.19.*Not affected
6.0.3 through 6.0.*Not affected
6.1 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.