CVE-2022-50814 crypto: hisilicon/zip - fix mismatch in get/set sgl_sge_nr
A type mismatch in the Hisilicon ZIP driver causes out-of-bounds reads, potentially leading to system crashes or privilege escalation for local attackers.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2022-50814?
CVE-2022-50814 is a memory corruption vulnerability in Linux, published on 30 Dec 2025. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
In the Linux kernel, the following vulnerability has been resolved:
crypto: hisilicon/zip - fix mismatch in get/set sgl_sge_nr
KASAN reported this Bug:
[17619.659757] BUG: KASAN: global-out-of-bounds in param_get_int+0x34/0x60 [17619.673193] Read of size 4 at addr fffff01332d7ed00 by task read_all/1507958 ... [17619.698934] The buggy address belongs to the variable: [17619.708371] sgl_sge_nr+0x0/0xffffffffffffa300 [hisi_zip]
There is a mismatch in hisi_zip when get/set the variable sgl_sge_nr. The type of sgl_sge_nr is u16, and get/set sgl_sge_nr by param_get/set_int.
Replacing param_get/set_int to param_get/set_ushort can fix this bug.
Which versions are affected by CVE-2022-50814?
How do I fix CVE-2022-50814?
Apply the vendor's patch.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2022-50814 being exploited?
There is no known exploitation of CVE-2022-50814 in the wild and no public exploit code.
Sources
Also known as DEBIAN-CVE-2022-50814, GHSA-76g7-xjv5-wpj8, UBUNTU-CVE-2022-50814.