High · published February 26, 2025
In the Linux kernel, the following vulnerability has been resolved:
crypto: qat - add param check for DH
Reject requests with a source buffer that is bigger than the size of the
key. This is to prevent a possible integer underflow that might happen
when copying the source scatterlist into a linear buffer.
| Product | Versions | Fixed in |
|---|---|---|
| linux/linux_kernel | < 5.15.58 | 5.15.58 |
| linux/linux_kernel | ≥ 5.16, < 5.18.15 | 5.18.15 |