CVE-2022-50828

CVE-2022-50828 is a stack-out-of-bounds vulnerability in the Linux kernel's ZynqMP clock driver, specifically affecting the strncpy function. When a clock name exceeds 15 bytes, the Linux-ATF interface fails to null-terminate the string, leading to memory corruption. This issue primarily impacts systems utilizing Xilinx Zynq UltraScale+ MPSoC and Versal ACAP devices. The vulnerability has a low attack complexity as it can be triggered by providing an overly long clock name, potentially leading to system instability, denial of service, or information disclosure. While no CVSS score is provided, the KASAN report indicates a critical memory safety issue. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE. It is not listed on the CISA KEV catalog, suggesting it is not widely exploited in the wild.