CVE-2022-50407

In the Linux kernel, the following vulnerability has been resolved:

crypto: hisilicon/qm - increase the memory of local variables

Increase the buffer to prevent stack overflow by fuzz test. The maximum length of the qos configuration buffer is 256 bytes. Currently, the value of the 'val buffer' is only 32 bytes. The sscanf does not check the dest memory length. So the 'val buffer' may stack overflow.

Red Hat Enterprise Linux is not vulnerable to this issue because the affected HiSilicon Queue Management driver code is not present in supported kernels. Exploitation would require local access to specialized HiSilicon hardware accelerators to trigger memory corruption leading to a system denial of service. Consequently, standard Red Hat deployments remain unaffected.