Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2022-49564

crypto: qat - add param check for DH

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: crypto: qat - add param check for DH Reject requests with a source buffer that is bigger than the size of the key. This is to prevent a possible integer underflow that might happen when copying the source scatterlist into a linear buffer.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • c9839143ebbf5e821128da44f7e271d745aab19e to < e7f979ed51f96495328157df663c835b17db1e30affected
  • c9839143ebbf5e821128da44f7e271d745aab19e to < 76c9216833e7c20a67c987cf89719a3f01666aaaaffected
  • c9839143ebbf5e821128da44f7e271d745aab19e to < 2acbb8771f6ac82422886e63832ee7a0f4b1635baffected

Linux Linux

Default version status: affected

  • 4.8affected
  • 0 to < 4.8unaffected
  • 5.15.58 to ≤ 5.15.*unaffected
  • 5.18.15 to ≤ 5.18.*unaffected
  • 5.19 to ≤ *unaffected

References