PT-2025-53129 · Linux · Linux Kernel

Published 2025-12-24 · Updated 2026-02-24 · CVE-2022-50763

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel contains a flaw in the crypto/marvell/octeontx module where integer overflows can occur. The code length value, sourced from firmware files, is susceptible to overflow. Specifically, the calculation code length * 2 and the expression round up(ucode size, 16) + sizeof() can lead to overflows. This issue is particularly relevant when dealing with untrusted firmware, as limiting the damage is difficult in such scenarios. The Smatch tool flags data read from the filesystem as untrusted and issues warnings if it is not properly capped.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2022-50763

SUSE-SU-2026:0263-1

SUSE-SU-2026:0317-1

SUSE-SU-2026:0411-1

SUSE-SU-2026:0617-1

Affected Products

Linux Kernel

References · 972

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/50xxx/CVE-2022-50763.json · Exploit
• https://osv.dev/vulnerability/CVE-2022-50763 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-50763 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-50763 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-50763 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2026:0317-1 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2022-50763 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-50763 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2022-50763 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:0617-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:0411-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:0263-1 · Vendor Advisory
• https://bugzilla.suse.com/1255996 · Note
• https://suse.com/security/cve/CVE-2023-54118 · Note
• https://bugzilla.suse.com/1255007 · Note