CVE-2022-50623
kernel: fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
Severity
UnknownRed Hat Product Security
CVSS
Review impact separately from score.
Published · December 8, 2025
Updated · October 30, 2026
Description
In the Linux kernel, the following vulnerability has been resolved:
fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
The "hdr.count * sizeof(s32)" multiplication can overflow on 32 bit systems leading to memory corruption. Use array_size() to fix that.
Statement
This vulnerability does not affect Red Hat Enterprise Linux because the vulnerable code is not present in supported kernel releases. Additionally, the arithmetic overflow condition is restricted to 32-bit architectures, whereas supported enterprise environments run exclusively on 64-bit kernels. Exploitation would also require local access and interaction with specialized FPGA Device Feature List hardware interfaces.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CWE not specified