CVE-2022-49564

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2022-49564
In the Linux kernel, the following vulnerability has been resolved: crypto: qat - add param check for DH Reject requests with a source buffer that is bigger than the size of the key. This is to prevent a possible integer underflow that might happen when copying the source scatterlist into a linear buffer.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/2acbb8771f6ac82422886e63832ee7a0f4b1635b Patch
https://git.kernel.org/stable/c/76c9216833e7c20a67c987cf89719a3f01666aaa Patch
https://git.kernel.org/stable/c/e7f979ed51f96495328157df663c835b17db1e30 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

10 Mar 2025, 21:19

Type Values Removed Values Added
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
References () https://git.kernel.org/stable/c/2acbb8771f6ac82422886e63832ee7a0f4b1635b - () https://git.kernel.org/stable/c/2acbb8771f6ac82422886e63832ee7a0f4b1635b - Patch
References () https://git.kernel.org/stable/c/76c9216833e7c20a67c987cf89719a3f01666aaa - () https://git.kernel.org/stable/c/76c9216833e7c20a67c987cf89719a3f01666aaa - Patch
References () https://git.kernel.org/stable/c/e7f979ed51f96495328157df663c835b17db1e30 - () https://git.kernel.org/stable/c/e7f979ed51f96495328157df663c835b17db1e30 - Patch
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
First Time Linux
Linux linux Kernel
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: crypto: qat - agregar comprobación de parámetros para solicitudes de rechazo DH con un búfer de origen que sea más grande que el tamaño de la clave. Esto es para evitar un posible desbordamiento de enteros que podría ocurrir al copiar la lista de dispersión de origen en un búfer lineal.
CWE CWE-191

26 Feb 2025, 07:01

Type Values Removed Values Added
New CVE
Information

Published : 2025-02-26 07:01

Updated : 2025-03-10 21:19

NVD link : CVE-2022-49564

Mitre link : CVE-2022-49564

CVE.ORG link : CVE-2022-49564

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-191

Integer Underflow (Wrap or Wraparound)