{"id":"CVE-2022-50814","state":"PUBLISHED","title":"crypto: hisilicon/zip - fix mismatch in get/set sgl_sge_nr","description":"In the Linux kernel, the following vulnerability has been resolved:\n\ncrypto: hisilicon/zip - fix mismatch in get/set sgl_sge_nr\n\nKASAN reported this Bug:\n\n\t[17619.659757] BUG: KASAN: global-out-of-bounds in param_get_int+0x34/0x60\n\t[17619.673193] Read of size 4 at addr fffff01332d7ed00 by task read_all/1507958\n\t...\n\t[17619.698934] The buggy address belongs to the variable:\n\t[17619.708371]  sgl_sge_nr+0x0/0xffffffffffffa300 [hisi_zip]\n\nThere is a mismatch in hisi_zip when get/set the variable sgl_sge_nr.\nThe type of sgl_sge_nr is u16, and get/set sgl_sge_nr by\nparam_get/set_int.\n\nReplacing param_get/set_int to param_get/set_ushort can fix this bug.","publishedAt":"2025-12-30T12:08:30.862Z","updatedAt":"2026-05-11T19:25:38.090Z","severity":null,"assigner":"Linux","products":["Linux Linux"],"affected":[{"vendor":"Linux","product":"Linux","defaultStatus":"unaffected","versions":[{"version":"f081fda293ffba54216a7dab66faba7275475006","status":"affected","lessThan":"d88b88514ef28515ccfa1f1787c2aedef75a79dd","versionType":"git"},{"version":"f081fda293ffba54216a7dab66faba7275475006","status":"affected","lessThan":"272093471305261c4e07a2fc97c2d1e53cd56819","versionType":"git"},{"version":"f081fda293ffba54216a7dab66faba7275475006","status":"affected","lessThan":"f8a983d6e01b198320d310cb1326364d7d973b2a","versionType":"git"},{"version":"f081fda293ffba54216a7dab66faba7275475006","status":"affected","lessThan":"5eaebd19fbb0e26e73a34f55d3b1dc310df0eb15","versionType":"git"},{"version":"f081fda293ffba54216a7dab66faba7275475006","status":"affected","lessThan":"d74f9340097a881869c4c22ca376654cc2516ecc","versionType":"git"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["drivers/crypto/hisilicon/zip/zip_crypto.c"]},{"vendor":"Linux","product":"Linux","defaultStatus":"affected","versions":[{"version":"5.5","status":"affected"},{"version":"0","status":"unaffected","lessThan":"5.5","versionType":"semver"},{"version":"5.10.150","status":"unaffected","lessThanOrEqual":"5.10.*","versionType":"semver"},{"version":"5.15.75","status":"unaffected","lessThanOrEqual":"5.15.*","versionType":"semver"},{"version":"5.19.17","status":"unaffected","lessThanOrEqual":"5.19.*","versionType":"semver"},{"version":"6.0.3","status":"unaffected","lessThanOrEqual":"6.0.*","versionType":"semver"},{"version":"6.1","status":"unaffected","lessThanOrEqual":"*","versionType":"original_commit_for_fix"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["drivers/crypto/hisilicon/zip/zip_crypto.c"]}],"references":["https://git.kernel.org/stable/c/d88b88514ef28515ccfa1f1787c2aedef75a79dd","https://git.kernel.org/stable/c/272093471305261c4e07a2fc97c2d1e53cd56819","https://git.kernel.org/stable/c/f8a983d6e01b198320d310cb1326364d7d973b2a","https://git.kernel.org/stable/c/5eaebd19fbb0e26e73a34f55d3b1dc310df0eb15","https://git.kernel.org/stable/c/d74f9340097a881869c4c22ca376654cc2516ecc"],"weaknesses":[],"ingestedAt":"2026-10-29T20:05:26.763Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2022/50xxx/CVE-2022-50814.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2022-50814","state":"PUBLISHED","datePublished":"2025-12-30T12:08:30.862Z","dateUpdated":"2026-05-11T19:25:38.090Z","assignerShortName":"Linux","assignerOrgId":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","dateReserved":"2025-12-30T12:06:07.130Z"},"containers":{"cna":{"title":"crypto: hisilicon/zip - fix mismatch in get/set sgl_sge_nr","descriptions":[{"lang":"en","value":"In the Linux kernel, the following vulnerability has been resolved:\n\ncrypto: hisilicon/zip - fix mismatch in get/set sgl_sge_nr\n\nKASAN reported this Bug:\n\n\t[17619.659757] BUG: KASAN: global-out-of-bounds in param_get_int+0x34/0x60\n\t[17619.673193] Read of size 4 at addr fffff01332d7ed00 by task read_all/1507958\n\t...\n\t[17619.698934] The buggy address belongs to the variable:\n\t[17619.708371]  sgl_sge_nr+0x0/0xffffffffffffa300 [hisi_zip]\n\nThere is a mismatch in hisi_zip when get/set the variable sgl_sge_nr.\nThe type of sgl_sge_nr is u16, and get/set sgl_sge_nr by\nparam_get/set_int.\n\nReplacing param_get/set_int to param_get/set_ushort can fix this bug."}],"affected":[{"vendor":"Linux","product":"Linux","defaultStatus":"unaffected","versions":[{"version":"f081fda293ffba54216a7dab66faba7275475006","status":"affected","lessThan":"d88b88514ef28515ccfa1f1787c2aedef75a79dd","versionType":"git"},{"version":"f081fda293ffba54216a7dab66faba7275475006","status":"affected","lessThan":"272093471305261c4e07a2fc97c2d1e53cd56819","versionType":"git"},{"version":"f081fda293ffba54216a7dab66faba7275475006","status":"affected","lessThan":"f8a983d6e01b198320d310cb1326364d7d973b2a","versionType":"git"},{"version":"f081fda293ffba54216a7dab66faba7275475006","status":"affected","lessThan":"5eaebd19fbb0e26e73a34f55d3b1dc310df0eb15","versionType":"git"},{"version":"f081fda293ffba54216a7dab66faba7275475006","status":"affected","lessThan":"d74f9340097a881869c4c22ca376654cc2516ecc","versionType":"git"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["drivers/crypto/hisilicon/zip/zip_crypto.c"]},{"vendor":"Linux","product":"Linux","defaultStatus":"affected","versions":[{"version":"5.5","status":"affected"},{"version":"0","status":"unaffected","lessThan":"5.5","versionType":"semver"},{"version":"5.10.150","status":"unaffected","lessThanOrEqual":"5.10.*","versionType":"semver"},{"version":"5.15.75","status":"unaffected","lessThanOrEqual":"5.15.*","versionType":"semver"},{"version":"5.19.17","status":"unaffected","lessThanOrEqual":"5.19.*","versionType":"semver"},{"version":"6.0.3","status":"unaffected","lessThanOrEqual":"6.0.*","versionType":"semver"},{"version":"6.1","status":"unaffected","lessThanOrEqual":"*","versionType":"original_commit_for_fix"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["drivers/crypto/hisilicon/zip/zip_crypto.c"]}],"references":[{"url":"https://git.kernel.org/stable/c/d88b88514ef28515ccfa1f1787c2aedef75a79dd"},{"url":"https://git.kernel.org/stable/c/272093471305261c4e07a2fc97c2d1e53cd56819"},{"url":"https://git.kernel.org/stable/c/f8a983d6e01b198320d310cb1326364d7d973b2a"},{"url":"https://git.kernel.org/stable/c/5eaebd19fbb0e26e73a34f55d3b1dc310df0eb15"},{"url":"https://git.kernel.org/stable/c/d74f9340097a881869c4c22ca376654cc2516ecc"}],"providerMetadata":{"shortName":"Linux","orgId":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","dateUpdated":"2026-05-11T19:25:38.090Z"},"cpeApplicability":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"5.5","versionEndExcluding":"5.10.150"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"5.5","versionEndExcluding":"5.15.75"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"5.5","versionEndExcluding":"5.19.17"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"5.5","versionEndExcluding":"6.0.3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"5.5","versionEndExcluding":"6.1"}]}]}],"x_generator":{"engine":"bippy-1.2.0"}}}}}