CVE-2023-54325

An out-of-bounds read vulnerability was found in the Linux kernel's Intel QAT (QuickAssist Technology) crypto driver. When preparing an AES-CTR encryption request on QAT GEN4 devices, the driver rounds up the key size by 16 bytes before copying. If this rounding occurs before the memcpy operation, the driver reads beyond the bounds of the user-provided key buffer.

This flaw affects systems with Intel QAT GEN4 hardware accelerators using the crypto API. The out-of-bounds read occurs during cipher key setup and could potentially leak kernel memory contents or cause a crash. Exploitation requires local access and the ability to configure cryptographic operations on QAT devices.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

To mitigate this issue, prevent the intel_qat module from being loaded. See https://access.redhat.com/solutions/41278 for instructions.