CVE-2022-49564

In the Linux kernel, the following vulnerability has been resolved:

crypto: qat - add param check for DH

Reject requests with a source buffer that is bigger than the size of the key. This is to prevent a possible integer underflow that might happen when copying the source scatterlist into a linear buffer.

This vulnerability is rated as having Moderate impact for Red Hat Enterprise Linux because exploitation requires local system access and the presence of specialized Intel QuickAssist Technology (QAT) hardware accelerator devices. Systems lacking Intel QAT hardware or not utilizing hardware-accelerated asymmetric cryptographic operations remain unaffected. A local authenticated attacker capable of submitting crafted cryptographic requests could trigger an underflow condition, leading to a system crash and denial of service.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.