CVE-2022-49564

crypto: qat - add param check for DH

State: Published
Severity: 7.8 High
Published: Feb 26, 2025
Updated: Aug 5, 2026
Reserved: Feb 26, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

crypto: qat - add param check for DH

Reject requests with a source buffer that is bigger than the size of the key. This is to prevent a possible integer underflow that might happen when copying the source scatterlist into a linear buffer.

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	Linux
3.1	5.5 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	CISA-ADP

Weaknesses

CWE-191 Integer Underflow (Wrap or Wraparound)

Affected Products

Product	Versions
LinuxLinux	c9839143ebbf5e821128da44f7e271d745aab19e to before e7f979ed51f96495328157df663c835b17db1e30Affected c9839143ebbf5e821128da44f7e271d745aab19e to before 76c9216833e7c20a67c987cf89719a3f01666aaaAffected c9839143ebbf5e821128da44f7e271d745aab19e to before 2acbb8771f6ac82422886e63832ee7a0f4b1635bAffected
LinuxLinux	4.8Affected before 4.8Not affected 5.15.58 through 5.15.Not affected 5.18.15 through 5.18.Not affected 5.19 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.