CVE-2022-49563
5.5
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Summary
In the Linux kernel, the following vulnerability has been resolved:
crypto: qat - add param check for RSA
Reject requests with a source buffer that is bigger than the size of the key. This is to prevent a possible integer underflow that might happen when copying the source scatterlist into a linear buffer.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Linux | Linux | a990532023b903b10cf14736241cdd138e4bc92c < 4d6d2adce08788b7667a6e58002682ea1bbf6a79 | affected |
| Linux | Linux | a990532023b903b10cf14736241cdd138e4bc92c < f993321e50ba7a8ba4f5b19939e1772a921a1c42 | affected |
| Linux | Linux | a990532023b903b10cf14736241cdd138e4bc92c < 9714061423b8b24b8afb31b8eb4df977c63f19c4 | affected |
| Linux | Linux | 4.3 | affected |
| Linux | Linux | 0 < 4.3 | unaffected |
| Linux | Linux | 5.15.58 <= 5.15.* | unaffected |
| Linux | Linux | 5.18.15 <= 5.18.* | unaffected |
| Linux | Linux | 5.19 <= * | unaffected |
Weaknesses
ADP Enrichment
CISA ADP Vulnrichment
- SSVC:
- Exploitation: none
- Automatable: no
- Technical Impact: partial
References
- https://git.kernel.org/stable/c/4d6d2adce08788b7667a6e58002682ea1bbf6a79
- https://git.kernel.org/stable/c/f993321e50ba7a8ba4f5b19939e1772a921a1c42
- https://git.kernel.org/stable/c/9714061423b8b24b8afb31b8eb4df977c63f19c4
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.