HighFix available
crypto: cavium - prevent integer overflow loading firmware
Type: advisorySources: OSV
In the Linux kernel, the following vulnerability has been resolved: crypto: cavium - prevent integer overflow loading firmware The "code_length" value comes from the firmware file. If your firmware is untrusted realistically there is probably very little you can do to protect yourself. Still we try to limit the damage as much as possible. Also Smatch marks any data read from the filesystem as untrusted and prints warnings if it not capped correctly. The "ntohl(ucode->code_length) * 2" multiplication can have an integer overflow.
- Products
- Kernel
- Affected versions
- Not specified
- Fixed versions
- 4.14.296, 4.19.262, 5.10.150, 5.15.75, 5.19.17, 5.4.220, 6.0.3
- CVEs
- CVE-2022-50330
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 4 Nov 2026, 15:15 UTC · Revision 1
Source evidence
crypto: cavium - prevent integer overflow loading firmware
core-osv · Original sourcePublished 15 Sept 2025, 14:49 UTC
In the Linux kernel, the following vulnerability has been resolved: crypto: cavium - prevent integer overflow loading firmware The "code_length" value comes from the firmware file. If your firmware is untrusted realistically there is probably very little you can do to protect yourself. Still we try to limit the damage as much as possible. Also Smatch marks any data read from the filesystem as untrusted and prints warnings if it not capped correctly. The "ntohl(ucode->code_length) * 2" multiplication can have an integer overflow.
osv:CVE-2022-50330
Kernel
Fixed versions: 4.14.296, 4.19.262, 5.4.220, 5.10.150, 5.15.75, 5.19.17, 6.0.3
Complete source record
{
"id": "40f82fceece4fe4f3147d12f32e331ca82201cff533844f69506ad853bf91a15",
"url": "https://osv.dev/vulnerability/CVE-2022-50330",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "crypto: cavium - prevent integer overflow loading firmware",
"summary": "In the Linux kernel, the following vulnerability has been resolved: crypto: cavium - prevent integer overflow loading firmware The \"code_length\" value comes from the firmware file. If your firmware is untrusted realistically there is probably very little you can do to protect yourself. Still we try to limit the damage as much as possible. Also Smatch marks any data read from the filesystem as untrusted and prints warnings if it not capped correctly. The \"ntohl(ucode->code_length) * 2\" multiplication can have an integer overflow.",
"evidence": "osv:CVE-2022-50330",
"products": [
{
"name": {
"value": "Kernel",
"evidence": "/affected/1/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "4.14.296",
"evidence": "/affected/1/ranges"
},
{
"value": "4.19.262",
"evidence": "/affected/1/ranges"
},
{
"value": "5.4.220",
"evidence": "/affected/1/ranges"
},
{
"value": "5.10.150",
"evidence": "/affected/1/ranges"
},
{
"value": "5.15.75",
"evidence": "/affected/1/ranges"
},
{
"value": "5.19.17",
"evidence": "/affected/1/ranges"
},
{
"value": "6.0.3",
"evidence": "/affected/1/ranges"
}
],
"affected_versions": []
}
],
"severity": "high",
"structured": {
"id": "CVE-2022-50330",
"aliases": [
"CVE-2022-50330"
],
"metrics": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H"
}
],
"affected": [
{
"ranges": [
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"type": "GIT",
"events": [
{
"introduced": "9e2c7d99941d000a36f68a3594cec27a1bbea274"
},
{
"fixed": "c4d4c2afd08dfb3cd1c880d1811ede2568e81a6d"
},
{
"fixed": "90e483e7f20c32287d2a9da967e122938f52737a"
},
{
"fixed": "584561e94260268abe1c83e00d9c205565cb7bc5"
},
{
"fixed": "3a720eb89026c5241b8c4abb33370dc6fb565eee"
},
{
"fixed": "172c8a24fc8312cf6b88d3c88469653fdcb1c127"
},
{
"fixed": "371fa5129af53a79f6dddc90fe5bb0825cbe72a4"
},
{
"fixed": "e29fd7a6852376d2cfb95ad5d6d3eeff93f815e9"
},
{
"fixed": "2526d6bf27d15054bb0778b2f7bc6625fd934905"
}
]
}
],
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-50330.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "4.11.0"
},
{
"fixed": "4.14.296"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "4.15.0"
},
{
"fixed": "4.19.262"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "4.20.0"
},
{
"fixed": "5.4.220"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "5.5.0"
},
{
"fixed": "5.10.150"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "5.11.0"
},
{
"fixed": "5.15.75"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "5.16.0"
},
{
"fixed": "5.19.17"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "5.20.0"
},
{
"fixed": "6.0.3"
}
]
}
],
"package": {
"name": "Kernel",
"ecosystem": "Linux"
},
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-50330.json"
}
}
],
"modified": "2026-10-28T02:30:37.017692211Z",
"provider": "osv",
"references": [
"https://git.kernel.org/stable/c/172c8a24fc8312cf6b88d3c88469653fdcb1c127",
"https://git.kernel.org/stable/c/2526d6bf27d15054bb0778b2f7bc6625fd934905",
"https://git.kernel.org/stable/c/371fa5129af53a79f6dddc90fe5bb0825cbe72a4",
"https://git.kernel.org/stable/c/3a720eb89026c5241b8c4abb33370dc6fb565eee",
"https://git.kernel.org/stable/c/584561e94260268abe1c83e00d9c205565cb7bc5",
"https://git.kernel.org/stable/c/90e483e7f20c32287d2a9da967e122938f52737a",
"https://git.kernel.org/stable/c/c4d4c2afd08dfb3cd1c880d1811ede2568e81a6d",
"https://git.kernel.org/stable/c/e29fd7a6852376d2cfb95ad5d6d3eeff93f815e9",
"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/50xxx/CVE-2022-50330.json",
"https://nvd.nist.gov/vuln/detail/CVE-2022-50330",
"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git"
],
"provider_metadata": {
"cna_assigner": "Linux",
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/50xxx/CVE-2022-50330.json"
}
},
"related_cves": [
{
"value": "CVE-2022-50330",
"evidence": "/id"
}
],
"security_relevant": true,
"severity_evidence": "/severity/0/score"
},
"source_id": "core-osv",
"document_id": 504050,
"published_at": "2025-09-15T14:49:33.015+00:00"
}