Description (CNA)
In the Linux kernel, the following vulnerability has been resolved: crypto: qat - add param check for RSA Reject requests with a source buffer that is bigger than the size of the key. This is to prevent a possible integer underflow that might happen when copying the source scatterlist into a linear buffer.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Linux / Linux | affected a990532023b903b10cf14736241cdd138e4bc92c before 4d6d2adce08788b7667a6e58002682ea1bbf6a79; affected a990532023b903b10cf14736241cdd138e4bc92c before f993321e50ba7a8ba4f5b19939e1772a921a1c42; affected a990532023b903b10cf14736241cdd138e4bc92c before 9714061423b8b24b8afb31b8eb4df977c63f19c4 |
| Linux / Linux | affected 4.3; unaffected 0 before 4.3; unaffected 5.15.58 through 5.15.*; unaffected 5.18.15 through 5.18.*; unaffected 5.19 through * |
CWE
No CWE identifiers supplied.
References
- https://git.kernel.org/stable/c/4d6d2adce08788b7667a6e58002682ea1bbf6a79
- https://git.kernel.org/stable/c/f993321e50ba7a8ba4f5b19939e1772a921a1c42
- https://git.kernel.org/stable/c/9714061423b8b24b8afb31b8eb4df977c63f19c4
ADP enrichment
No English description supplied.
No references supplied.