CVE-2022-49563

crypto: qat - add param check for RSA

State: Published
Severity: 7.8 High
Published: Feb 26, 2025
Updated: Aug 5, 2026
Reserved: Feb 26, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

crypto: qat - add param check for RSA

Reject requests with a source buffer that is bigger than the size of the key. This is to prevent a possible integer underflow that might happen when copying the source scatterlist into a linear buffer.

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	Linux
3.1	5.5 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	CISA-ADP

Weaknesses

CWE-191 Integer Underflow (Wrap or Wraparound)

Affected Products

Product	Versions
LinuxLinux	a990532023b903b10cf14736241cdd138e4bc92c to before 4d6d2adce08788b7667a6e58002682ea1bbf6a79Affected a990532023b903b10cf14736241cdd138e4bc92c to before f993321e50ba7a8ba4f5b19939e1772a921a1c42Affected a990532023b903b10cf14736241cdd138e4bc92c to before 9714061423b8b24b8afb31b8eb4df977c63f19c4Affected
LinuxLinux	4.3Affected before 4.3Not affected 5.15.58 through 5.15.Not affected 5.18.15 through 5.18.Not affected 5.19 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.