CVE-2022-50814
crypto: hisilicon/zip - fix mismatch in get/set sgl_sge_nr
- Published
- Updated
- Reserved
- Assigned by
- Linux
Description
In the Linux kernel, the following vulnerability has been resolved: crypto: hisilicon/zip - fix mismatch in get/set sgl_sge_nr KASAN reported this Bug: [17619.659757] BUG: KASAN: global-out-of-bounds in param_get_int+0x34/0x60 [17619.673193] Read of size 4 at addr fffff01332d7ed00 by task read_all/1507958 ... [17619.698934] The buggy address belongs to the variable: [17619.708371] sgl_sge_nr+0x0/0xffffffffffffa300 [hisi_zip] There is a mismatch in hisi_zip when get/set the variable sgl_sge_nr. The type of sgl_sge_nr is u16, and get/set sgl_sge_nr by param_get/set_int. Replacing param_get/set_int to param_get/set_ushort can fix this bug.
Timeline
ID reserved
By Linux
Published
- 4 months later
· 4 months later
Record updated
Changes after publication (a new score, a public exploit, EPSS crossing 1, 10 or 50 %, leaving KEV) are kept since November 2026; earlier ones are not known.
Scores
No CVSS score yet: neither the CNA, CISA nor NVD has scored this CVE. NVD status: Deferred.
- EPSS (exploitation in 30 days)
- 0.24% · top 84% of all CVEs (7 Nov 2026)
The list uses the assigner's score when there is one, then CISA's, then NVD's: Not scored.
Affected products
- affected f081fda293ffba54216a7dab66faba7275475006 – < d88b88514ef28515ccfa1f1787c2aedef75a79dd
- affected f081fda293ffba54216a7dab66faba7275475006 – < 272093471305261c4e07a2fc97c2d1e53cd56819
- affected f081fda293ffba54216a7dab66faba7275475006 – < f8a983d6e01b198320d310cb1326364d7d973b2a
- affected f081fda293ffba54216a7dab66faba7275475006 – < 5eaebd19fbb0e26e73a34f55d3b1dc310df0eb15
- affected f081fda293ffba54216a7dab66faba7275475006 – < d74f9340097a881869c4c22ca376654cc2516ecc
- affected 5.5
- unaffected < 5.5
- unaffected 5.10.150 – ≤ 5.10.*
- unaffected 5.15.75 – ≤ 5.15.*
- unaffected 5.19.17 – ≤ 5.19.*
- unaffected 6.0.3 – ≤ 6.0.*
- unaffected 6.1 – ≤ *
References (5)
- https://git.kernel.org/stable/c/d88b88514ef28515ccfa1f1787c2aedef75a79dd (opens in a new tab)
- https://git.kernel.org/stable/c/272093471305261c4e07a2fc97c2d1e53cd56819 (opens in a new tab)
- https://git.kernel.org/stable/c/f8a983d6e01b198320d310cb1326364d7d973b2a (opens in a new tab)
- https://git.kernel.org/stable/c/5eaebd19fbb0e26e73a34f55d3b1dc310df0eb15 (opens in a new tab)
- https://git.kernel.org/stable/c/d74f9340097a881869c4c22ca376654cc2516ecc (opens in a new tab)
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisories (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Badge for a README or a ticket
[](https://trackcve.app/cve/CVE-2022-50814)Record last updated .