Skip to content
CVE PROGRAM SOURCE RECORD5.5 Medium

CVE-2022-49566

crypto: qat - fix memory leak in RSA

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: crypto: qat - fix memory leak in RSA When an RSA key represented in form 2 (as defined in PKCS #1 V2.1) is used, some components of the private key persist even after the TFM is released. Replace the explicit calls to free the buffers in qat_rsa_exit_tfm() with a call to qat_rsa_clear_ctx() which frees all buffers referenced in the TFM context.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 879f77e9071f029e1c9bd5a75814ecf51370f846 to < a843925e0287eebb4aa808666bf22c664dfe4c53affected
  • 879f77e9071f029e1c9bd5a75814ecf51370f846 to < 0f967fdc09955221a1951a279481b0bf4d359941affected
  • 879f77e9071f029e1c9bd5a75814ecf51370f846 to < 80a52e1ee7757b742f96bfb0d58f0c14eb6583d0affected

Linux Linux

Default version status: affected

  • 4.8affected
  • 0 to < 4.8unaffected
  • 5.15.58 to ≤ 5.15.*unaffected
  • 5.18.15 to ≤ 5.18.*unaffected
  • 5.19 to ≤ *unaffected

References