Security readout for executives and security teams
Plain-English summary
CVE-2022-50814 is a Linux kernel bug in the HiSilicon ZIP crypto driver. A module parameter uses the wrong getter/setter type, causing a kernel global out-of-bounds read reported by KASAN. Business exposure appears narrow: Linux systems using this specific driver or hardware path. No source provided indicates active exploitation.
Executive priority
Treat as a targeted kernel maintenance issue, not an emergency internet-wide threat. Prioritize patching on Linux systems using HiSilicon acceleration or custom kernels. Standard kernel update cycles are appropriate unless local evidence shows driver use on critical systems.
Technical view
The hisi_zip driver defines sgl_sge_nr as u16 but handled it with param_get_int/param_set_int. The kernel fix replaces those with param_get_ushort/param_set_ushort. The reported failure is a KASAN global-out-of-bounds read in param_get_int when reading the module parameter.
Likely exposure
Likely limited to Linux kernels with the hisilicon/zip crypto driver present and used, especially systems with HiSilicon ZIP acceleration. The CVE record lists Linux as affected across multiple kernel release lines, but the exact distribution package exposure requires vendor mapping.
Exploitation context
The source bundle reports a KASAN-detected out-of-bounds read. It does not provide exploitability details, remote attack paths, privilege requirements, or public exploitation. CISA KEV status is false in the provided data.
Researcher notes
Evidence is limited to the kernel fix description and stable commit references. No CVSS, CWE, exploit status, or detailed attack scenario is provided. Focus analysis on module parameter exposure, driver presence, and whether distribution kernels backported the ushort parameter fix.
Mitigation direction
- Update to a vendor kernel containing the referenced stable kernel fixes.
- Prioritize systems where the hisi_zip driver is present or loaded.
- If no update is available, check Linux distribution or hardware vendor guidance.
Validation and detection
- Inventory Linux kernel versions and distribution backport status.
- Check whether the hisi_zip driver is built, installed, or loaded.
- Confirm vendor kernel changelogs include the referenced stable commits.
- Review kernel logs for KASAN or module parameter read errors where applicable.
Public sources used
- CVE Program
- CVE List V5
- Linux stable commit d88b88514ef28515ccfa1f1787c2aedef75a79dd
- Linux stable commit 272093471305261c4e07a2fc97c2d1e53cd56819
- Linux stable commit f8a983d6e01b198320d310cb1326364d7d973b2a
- Linux stable commit 5eaebd19fbb0e26e73a34f55d3b1dc310df0eb15
- Linux stable commit d74f9340097a881869c4c22ca376654cc2516ecc
Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.
Conservative CVE-to-ATT&CK context
These mappings and lookup hints may be relevant to the vulnerability behavior, CWE, affected product, or exposure path. Glexia-inferred context is not an official MITRE, ATT&CK, CWE, or CVE Program mapping.
ATT&CK lookup starting points
Use these exact CWE pages and searches to review the Glexia ATT&CK library from this CVE's weakness and description context.
CVE-2022-50814 mapping review
Open the CVE-to-ATT&CK bridge for reviewed, inferred, or future official mappings tied to this CVE.
Open ATT&CK lookup- Severity
- Unknown
- CVSS
- Not scored
- Known Exploited
- No
- Published
CNA and ADP enrichment extracted from CVE v5
These fields come from the CVE record and ADP containers, not from Glexia's Take. They preserve time-varying source decisions such as CISA SSVC, KEV status, CVSS metrics, and provider references.
CVSS and timeline data
No CVSS vectors or timeline events were available in the normalized CVE source material.
Source materials
- CVE List V5 sourceCVE List V5
- https://git.kernel.org/stable/c/d88b88514ef28515ccfa1f1787c2aedef75a79ddCVE reference
- https://git.kernel.org/stable/c/272093471305261c4e07a2fc97c2d1e53cd56819CVE reference
- https://git.kernel.org/stable/c/f8a983d6e01b198320d310cb1326364d7d973b2aCVE reference
- https://git.kernel.org/stable/c/5eaebd19fbb0e26e73a34f55d3b1dc310df0eb15CVE reference
- https://git.kernel.org/stable/c/d74f9340097a881869c4c22ca376654cc2516eccCVE reference
Products and packages named in the record
CWE details
CWE links open Glexia weakness intelligence pages with official CWE context, developer remediation guidance, and related CVE mappings.