CVE-2022-50407
MEDIUMLinux Kernel 5.4-6.2 - Stack Overflow via Unbounded sscanf in QoS Configuration
Title source: llmDescription
In the Linux kernel, the following vulnerability has been resolved: crypto: hisilicon/qm - increase the memory of local variables Increase the buffer to prevent stack overflow by fuzz test. The maximum length of the qos configuration buffer is 256 bytes. Currently, the value of the 'val buffer' is only 32 bytes. The sscanf does not check the dest memory length. So the 'val buffer' may stack overflow.
References (3)
Core 3
Scores
CVSS v3
5.5
EPSS
0.0016
EPSS Percentile
5.5%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
no
Technical Impact
partial
Details
CWE
CWE-674
Status
published
Products (11)
linux/Kernel
5.4.0 - 6.0.16linux
linux/Kernel
6.1.0 - 6.1.2linux
Linux/Linux
< 5.4
Linux/Linux
263c9959c9376ec0217d6adc61222a53469eed3c - 34c4f8ad45b4ea814c7ecc3f23a2d292959d5a52
Linux/Linux
263c9959c9376ec0217d6adc61222a53469eed3c - 3efe90af4c0c46c58dba1b306de142827153d9c0
Linux/Linux
263c9959c9376ec0217d6adc61222a53469eed3c - fc521abb6ee4b8f06fdfc52646140dab6a2ed334
Linux/Linux
5.4
Linux/Linux
6.0.16 - 6.0.*
Linux/Linux
6.1.2 - 6.1.*
Linux/Linux
6.2
... and 1 more
Published
Sep 18, 2025
Tracked Since
Feb 18, 2026