CVE-2022-50050

In the Linux kernel, the following vulnerability has been resolved:

ASoC: SOF: Intel: hda: Fix potential buffer overflow by snprintf()

snprintf() returns the would-be-filled size when the string overflows the given buffer size, hence using this value may result in the buffer overflow (although it's unrealistic).

This patch replaces with a safer version, scnprintf() for papering over such a potential issue.

This vulnerability is rated as Moderate severity because exploitation requires local access alongside specific Intel sound hardware, and practical triggering of the condition is considered highly improbable. The flaw stems from improper handling of string formatting return values in the Sound Open Firmware (SOF) Intel audio driver, which could theoretically lead to kernel memory corruption or a denial of service. Standard Red Hat Enterprise Linux server installations and cloud environments that lack Intel SOF audio devices are unaffected in practice.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.