CVE-2022-49563

In the Linux kernel, the following vulnerability has been resolved:

crypto: qat - add param check for RSA

Reject requests with a source buffer that is bigger than the size of the key. This is to prevent a possible integer underflow that might happen when copying the source scatterlist into a linear buffer.

This vulnerability is rated as Moderate severity because it requires local authenticated access and is constrained to systems configured with Intel QuickAssist Technology (QAT) accelerator hardware. Default Red Hat Enterprise Linux deployments without QAT hardware or where the driver is unutilized are not exposed to this issue. An authenticated local user could submit malformed RSA requests to induce an integer underflow in the driver, resulting in a kernel crash and denial of service.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.