CVE-2022-50051

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2022-50051
In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: debug: Fix potential buffer overflow by snprintf() snprintf() returns the would-be-filled size when the string overflows the given buffer size, hence using this value may result in the buffer overflow (although it's unrealistic). This patch replaces with a safer version, scnprintf() for papering over such a potential issue.

7.8 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/1eb123ce985e6cf302ac6e3f19862d132d86fa8f Patch
https://git.kernel.org/stable/c/a67971a17604ae7de278fb09243432459afc51e1 Patch
https://git.kernel.org/stable/c/b318b9dd2ac67f39d0338ce563879d1f59a0347a Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.0:rc1:*:*:*:*:*:*
History

13 Nov 2025, 18:41

Type Values Removed Values Added
CPE cpe:2.3:o:linux:linux_kernel:6.0:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
First Time Linux
Linux linux Kernel
CWE CWE-787
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 7.8
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: ASoC: SOF: depuración: Corrección de un posible desbordamiento de búfer mediante snprintf(). snprintf() devuelve el tamaño que se espera que se llene cuando la cadena supera el tamaño de búfer especificado; por lo tanto, usar este valor podría provocar un desbordamiento de búfer (aunque esto no es realista). Este parche reemplaza scnprintf(), una versión más segura, para disimular este posible problema.
References () https://git.kernel.org/stable/c/1eb123ce985e6cf302ac6e3f19862d132d86fa8f - () https://git.kernel.org/stable/c/1eb123ce985e6cf302ac6e3f19862d132d86fa8f - Patch
References () https://git.kernel.org/stable/c/a67971a17604ae7de278fb09243432459afc51e1 - () https://git.kernel.org/stable/c/a67971a17604ae7de278fb09243432459afc51e1 - Patch
References () https://git.kernel.org/stable/c/b318b9dd2ac67f39d0338ce563879d1f59a0347a - () https://git.kernel.org/stable/c/b318b9dd2ac67f39d0338ce563879d1f59a0347a - Patch

18 Jun 2025, 11:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-06-18 11:15

Updated : 2025-11-13 18:41

NVD link : CVE-2022-50051

Mitre link : CVE-2022-50051

CVE.ORG link : CVE-2022-50051

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-787

Out-of-bounds Write