CVE-2022-50330

MediumCVSS 5.5/10Last modified Aug 4, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

crypto: cavium - prevent integer overflow loading firmware

The "code_length" value comes from the firmware file. If your firmware is untrusted realistically there is probably very little you can do to protect yourself. Still we try to limit the damage as much as possible. Also Smatch marks any data read from the filesystem as untrusted and prints warnings if it not capped correctly.

The "ntohl(ucode->code_length) * 2" multiplication can have an integer overflow.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-190

Affected software

VendorProductVersions
LinuxLinux>= 9e2c7d99941d000a36f68a3594cec27a1bbea274, < c4d4c2afd08dfb3cd1c880d1811ede2568e81a6d; >= 9e2c7d99941d000a36f68a3594cec27a1bbea274, < 90e483e7f20c32287d2a9da967e122938f52737a; >= 9e2c7d99941d000a36f68a3594cec27a1bbea274, < 584561e94260268abe1c83e00d9c205565cb7bc5; >= 9e2c7d99941d000a36f68a3594cec27a1bbea274, < 3a720eb89026c5241b8c4abb33370dc6fb565eee; >= 9e2c7d99941d000a36f68a3594cec27a1bbea274, < 172c8a24fc8312cf6b88d3c88469653fdcb1c127; >= 9e2c7d99941d000a36f68a3594cec27a1bbea274, < 371fa5129af53a79f6dddc90fe5bb0825cbe72a4; >= 9e2c7d99941d000a36f68a3594cec27a1bbea274, < e29fd7a6852376d2cfb95ad5d6d3eeff93f815e9; >= 9e2c7d99941d000a36f68a3594cec27a1bbea274, < 2526d6bf27d15054bb0778b2f7bc6625fd934905
LinuxLinux4.11

References

Timeline

Published
Sep 15, 2025
Last modified
Aug 4, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-503315.5In the Linux kernel, the following vulnerability has been resolved: wwan_hwsim: fix possible memory leak in wwan_hwsim_dev_new() Inject faCVE-2022-503325.5In the Linux kernel, the following vulnerability has been resolved: video/aperture: Call sysfb_disable() before removing PCI devices Call CVE-2022-503337.1In the Linux kernel, the following vulnerability has been resolved: fs: jfs: fix shift-out-of-bounds in dbDiscardAG This should be appliedCVE-2022-503345.5In the Linux kernel, the following vulnerability has been resolved: hugetlbfs: fix null-ptr-deref in hugetlbfs_parse_param() Syzkaller repCVE-2022-503355.5In the Linux kernel, the following vulnerability has been resolved: 9p: set req refcount to zero to avoid uninitialized usage When a new rCVE-2022-503365.5In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Add null pointer check to attr_load_runs_vcn Some metadata fCVE-2022-503375.5In the Linux kernel, the following vulnerability has been resolved: ocxl: fix pci device refcount leak when calling get_function_0() get_fCVE-2022-503397.0In the Linux kernel, the following vulnerability has been resolved: Bluetooth: avoid hci_dev_test_and_set_flag() in mgmt_init_hdev() syzboCVE-2022-503405.5In the Linux kernel, the following vulnerability has been resolved: media: vimc: Fix wrong function called when vimc_init() fails In vimc_CVE-2022-503415.5In the Linux kernel, the following vulnerability has been resolved: cifs: fix oops during encryption When running xfstests against Azure tCVE-2022-503425.5In the Linux kernel, the following vulnerability has been resolved: floppy: Fix memory leak in do_floppy_init() A memory leak was reportedCVE-2022-503435.5In the Linux kernel, the following vulnerability has been resolved: rapidio: fix possible name leaks when rio_add_device() fails Patch ser