CVE-2022-50407

MEDIUM

Linux Kernel 5.4-6.2 - Stack Overflow via Unbounded sscanf in QoS Configuration

Title source: llm
STIX 2.1

Description

In the Linux kernel, the following vulnerability has been resolved: crypto: hisilicon/qm - increase the memory of local variables Increase the buffer to prevent stack overflow by fuzz test. The maximum length of the qos configuration buffer is 256 bytes. Currently, the value of the 'val buffer' is only 32 bytes. The sscanf does not check the dest memory length. So the 'val buffer' may stack overflow.

Scores

CVSS v3 5.5
EPSS 0.0016
EPSS Percentile 5.5%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-674
Status published
Products (11)
linux/Kernel 5.4.0 - 6.0.16linux
linux/Kernel 6.1.0 - 6.1.2linux
Linux/Linux < 5.4
Linux/Linux 263c9959c9376ec0217d6adc61222a53469eed3c - 34c4f8ad45b4ea814c7ecc3f23a2d292959d5a52
Linux/Linux 263c9959c9376ec0217d6adc61222a53469eed3c - 3efe90af4c0c46c58dba1b306de142827153d9c0
Linux/Linux 263c9959c9376ec0217d6adc61222a53469eed3c - fc521abb6ee4b8f06fdfc52646140dab6a2ed334
Linux/Linux 5.4
Linux/Linux 6.0.16 - 6.0.*
Linux/Linux 6.1.2 - 6.1.*
Linux/Linux 6.2
... and 1 more
Published Sep 18, 2025
Tracked Since Feb 18, 2026