CVE-2022-50570

In the Linux kernel, the following vulnerability has been resolved:

platform/chrome: fix memory corruption in ioctl

If "s_mem.bytes" is larger than the buffer size it leads to memory corruption.

This vulnerability does not pose an operational risk to Red Hat Enterprise Linux, as the affected ChromeOS embedded controller driver code is not present in supported enterprise kernel packages. The underlying driver is specifically targeted at ChromeOS hardware architectures that fall outside enterprise deployment targets. Consequently, local users cannot trigger this condition on supported Red Hat systems.