---
id: CVE-2022-50407
title: |-
  In the Linux kernel, the following vulnerability has been resolved:

  crypto: hisilicon/qm - increase the memory of local variables

  Increase the buffer to prevent stack overflow by fuzz test
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  crypto: hisilicon/qm - increase the memory of local variables

  Increase the buffer to prevent stack overflow by fuzz test. The maximum
  length of the qos configuration b…
severity: medium
cvss: 5.5
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'
cwe:
  - CWE-674
  - CWE-674
vendor: linux
product: linux_kernel
affected:
  - 'linux_kernel >= 5.4, < 6.0.16'
  - 'linux_kernel >= 6.1, < 6.1.2'
patched:
  - linux_kernel 6.1.2
published: '2025-09-18'
updated: '2026-08-15'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2022-50407'
references:
  - url: 'https://git.kernel.org/stable/c/34c4f8ad45b4ea814c7ecc3f23a2d292959d5a52'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/3efe90af4c0c46c58dba1b306de142827153d9c0'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/fc521abb6ee4b8f06fdfc52646140dab6a2ed334'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
tags:
  - nvd
epss: 0.0017
epssPercentile: 0.06692
ingestedAt: '2026-08-15T13:26:45.691Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

crypto: hisilicon/qm - increase the memory of local variables

Increase the buffer to prevent stack overflow by fuzz test. The maximum
length of the qos configuration buffer is 256 bytes. Currently, the value
of the 'val buffer' is only 32 bytes. The sscanf does not check the dest
memory length. So the 'val buffer' may stack overflow.

## Affected

- `linux_kernel >= 5.4, < 6.0.16`
- `linux_kernel >= 6.1, < 6.1.2`

## Remediation

Upgrade past the affected range:

- `linux_kernel 6.1.2`