Riskcovery

CVE-2022-50814

crypto: hisilicon/zip - fix mismatch in get/set sgl_sge_nr

State
Published
Severity
Not scored
Published
Dec 30, 2025
Updated
May 11, 2026
Reserved
Dec 30, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

crypto: hisilicon/zip - fix mismatch in get/set sgl_sge_nr

KASAN reported this Bug:

[17619.659757] BUG: KASAN: global-out-of-bounds in param_get_int+0x34/0x60 [17619.673193] Read of size 4 at addr fffff01332d7ed00 by task read_all/1507958 ... [17619.698934] The buggy address belongs to the variable: [17619.708371] sgl_sge_nr+0x0/0xffffffffffffa300 [hisi_zip]

There is a mismatch in hisi_zip when get/set the variable sgl_sge_nr. The type of sgl_sge_nr is u16, and get/set sgl_sge_nr by param_get/set_int.

Replacing param_get/set_int to param_get/set_ushort can fix this bug.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • f081fda293ffba54216a7dab66faba7275475006 to before d88b88514ef28515ccfa1f1787c2aedef75a79ddAffected
  • f081fda293ffba54216a7dab66faba7275475006 to before 272093471305261c4e07a2fc97c2d1e53cd56819Affected
  • f081fda293ffba54216a7dab66faba7275475006 to before f8a983d6e01b198320d310cb1326364d7d973b2aAffected
  • f081fda293ffba54216a7dab66faba7275475006 to before 5eaebd19fbb0e26e73a34f55d3b1dc310df0eb15Affected
  • f081fda293ffba54216a7dab66faba7275475006 to before d74f9340097a881869c4c22ca376654cc2516eccAffected
LinuxLinux
  • 5.5Affected
  • before 5.5Not affected
  • 5.10.150 through 5.10.*Not affected
  • 5.15.75 through 5.15.*Not affected
  • 5.19.17 through 5.19.*Not affected
  • 6.0.3 through 6.0.*Not affected
  • 6.1 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.