CVE-2022-50407: crypto: hisilicon/qm - increase the memory of local variables
In the Linux kernel, the following vulnerability has been resolved:
crypto: hisilicon/qm - increase the memory of local variables
Increase the buffer to prevent stack overflow by fuzz test. The maximum length of the qos configuration buffer is 256 bytes. Currently, the value of the 'val buffer' is only 32 bytes. The sscanf does not check the dest memory length. So the 'val buffer' may stack overflow.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2022-50407?
CVE-2022-50407 is classified as a medium severity vulnerability in the Linux kernel.
How do I fix CVE-2022-50407?
To mitigate CVE-2022-50407, update to the latest stable version of the Linux kernel where the vulnerability has been patched.
What does CVE-2022-50407 affect?
CVE-2022-50407 affects the Linux kernel's crypto subsystem, specifically related to the hisilicon/qm component.
What types of attacks can CVE-2022-50407 facilitate?
CVE-2022-50407 can potentially allow for stack overflow attacks if exploited by malicious actors.
When was CVE-2022-50407 discovered?
CVE-2022-50407 was reported and became publicly known in early 2023.