CVE-2022-50050

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2022-50050
In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: Intel: hda: Fix potential buffer overflow by snprintf() snprintf() returns the would-be-filled size when the string overflows the given buffer size, hence using this value may result in the buffer overflow (although it's unrealistic). This patch replaces with a safer version, scnprintf() for papering over such a potential issue.

7.8 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/6ee1310f4d148dbf04c4159b88afd0b941018903 Patch
https://git.kernel.org/stable/c/94c1ceb043c1a002de9649bb630c8e8347645982 Patch
https://git.kernel.org/stable/c/f7915c5614a7ece117ec390f21a410531eac48de Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.0:rc1:*:*:*:*:*:*
History

13 Nov 2025, 18:40

Type Values Removed Values Added
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: ASoC: SOF: Intel: hda: Corrección de un posible desbordamiento de búfer mediante snprintf(). snprintf() devuelve el tamaño que se espera que se llene cuando la cadena supera el tamaño de búfer especificado; por lo tanto, usar este valor podría provocar un desbordamiento de búfer (aunque esto no es realista). Este parche reemplaza a scnprintf(), una versión más segura, para disimular este posible problema.
CPE cpe:2.3:o:linux:linux_kernel:6.0:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
First Time Linux
Linux linux Kernel
CWE CWE-787
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 7.8
References () https://git.kernel.org/stable/c/6ee1310f4d148dbf04c4159b88afd0b941018903 - () https://git.kernel.org/stable/c/6ee1310f4d148dbf04c4159b88afd0b941018903 - Patch
References () https://git.kernel.org/stable/c/94c1ceb043c1a002de9649bb630c8e8347645982 - () https://git.kernel.org/stable/c/94c1ceb043c1a002de9649bb630c8e8347645982 - Patch
References () https://git.kernel.org/stable/c/f7915c5614a7ece117ec390f21a410531eac48de - () https://git.kernel.org/stable/c/f7915c5614a7ece117ec390f21a410531eac48de - Patch

18 Jun 2025, 11:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-06-18 11:15

Updated : 2025-11-13 18:40

NVD link : CVE-2022-50050

Mitre link : CVE-2022-50050

CVE.ORG link : CVE-2022-50050

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-787

Out-of-bounds Write