CVE-2022-50051

HIGH
MEDIUM Priority: 0.02 BB Relevance: 41/100
Published: 2025-06-18 Modified: 2026-11-05 First seen: 2026-11-05 Status: active

Attack Surface

Low Complexity No Interaction Conf. Impact Integ. Impact

CVSS Vector Breakdown

AV: Local
AC: Low
PR: Low
UI: None
S: Unchanged
C: High
I: High
A: High

Description

In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: debug: Fix potential buffer overflow by snprintf() snprintf() returns the would-be-filled size when the string overflows the given buffer size, hence using this value may result in the buffer overflow (although it's unrealistic). This patch replaces with a safer version, scnprintf() for papering over such a potential issue.

Weakness Classification (1)

Affected Software (6)

VendorProductVersion
Linux Linux 5b10b62989219aa527ee4fa555d1995a3b70981b < b318b9dd2ac67f39d0338ce563879d1f59a0347a
Linux Linux 5b10b62989219aa527ee4fa555d1995a3b70981b < a67971a17604ae7de278fb09243432459afc51e1
Linux Linux 5b10b62989219aa527ee4fa555d1995a3b70981b < 1eb123ce985e6cf302ac6e3f19862d132d86fa8f
Linux Linux 5.11
linux linux_kernel 5.11 – 5.15.63
linux linux_kernel 6.0

Bug Bounty Relevance

41 / 100
✓ Low complexity
✓ No user interaction

CVSS Score

7.8 / 10.0 v3.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS — Exploitation Probability

0.22%
Raw Score 0.002220
Percentile 12.9%
Date 2026-11-06

EPSS Trend

2026-11-06
0.00222
2026-11-05
0.00222

Intelligence Sources

mitre ref →
nvd ref →