PT-2025-53946 · Linux · Linux Kernel

CVE-2022-50828 · Published 2022-05-10 · Updated 2026-02-24

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:S/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.4.0-00396-g81ef9e7-dirty

Description The Linux kernel contains a stack-out-of-bounds write issue in the strncpy function within the zynqmp clock driver. This occurs when the clock name exceeds 15 bytes, leading to a missing null terminator and potential buffer overflow. The issue was identified through Kernel Address Sanitizer (KASAN) reporting a bug in the zynqmp clock probe function. The Linux-ATF interface uses 16 bytes of SMC payload, and when the clock name is longer than 15 bytes, the null terminator is not correctly received by Linux.

Recommendations Update to Linux kernel version 5.4.0-00396-g81ef9e7-dirty or a later version to address this issue.

Exploit

Fix

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

BDU:2026-08871

CVE-2022-50828

SUSE-SU-2026:0263-1

SUSE-SU-2026:0317-1

SUSE-SU-2026:0350-1

SUSE-SU-2026:0369-1

SUSE-SU-2026:0411-1

SUSE-SU-2026:0617-1

Affected Products

Linux Kernel

References · 985

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/50xxx/CVE-2022-50828.json · Exploit
• https://bdu.fstec.ru/vul/2026-08871 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-50828 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2022-50828 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2022-50828 · Security Note
• https://osv.dev/vulnerability/CVE-2022-50828 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-50828 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:0617-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-50828 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2026:0369-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:0263-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:0411-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:0317-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-50828 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:0350-1 · Vendor Advisory