CVE-2022-50814

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the Linux kernel’s crypto/hisi zip module related to a mismatch when getting or setting the sgl sge nr variable. The type of sgl sge nr is u16, but it was being accessed using param get/set int functions instead of param get/set ushort. This can lead to a global out-of-bounds read, as reported by KASAN. The buggy address belongs to the sgl sge nr variable within the hisi zip module.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.