{
  "cveId": "CVE-2022-50407",
  "url": "https://patchblox.com/security/cve/CVE-2022-50407",
  "summary": "CVE-2022-50407 is fixed in linux on 1 platform, first by DEBIAN-CVE-2022-50407, released September 18, 2025. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "crypto: hisilicon/qm - increase the memory of local variables",
  "description": "In the Linux kernel, the following vulnerability has been resolved:  crypto: hisilicon/qm - increase the memory of local variables  Increase the buffer to prevent stack overflow by fuzz test. The maximum length of the qos configuration buffer is 256 bytes. Currently, the value of the \u0027val buffer\u0027 is only 32 bytes. The sscanf does not check the dest memory length. So the \u0027val buffer\u0027 may stack overflow.",
  "published": "2025-09-18T16:15:43Z",
  "severity": "Moderate",
  "cvss": 5.5,
  "cvssVector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
  "cwe": "Uncontrolled Recursion",
  "epss": 0.00175,
  "epssPercentile": 0.07039,
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "vendorAdvisory": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-50407",
  "fixes": [
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 12.15 (bookworm)",
      "fixedVersion": "6.1.4-1",
      "fix": "DEBIAN-CVE-2022-50407",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2022-50407",
      "released": "2025-09-18T16:15:43Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 13.5 (trixie)",
      "fixedVersion": "6.1.4-1",
      "fix": "DEBIAN-CVE-2022-50407",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2022-50407",
      "released": "2025-09-18T16:15:43Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 14",
      "fixedVersion": "6.1.4-1",
      "fix": "DEBIAN-CVE-2022-50407",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2022-50407",
      "released": "2025-09-18T16:15:43Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-08T06:59:42Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}