CVE-2022-49564

MEDIUM EPSS 15.5%
Published Feb 26, 20251y ago · Modified Jun 17, 20262w ago
5.5 CVSS 3.1
Medium
Find Similar
Published Feb 26, 2025 1y ago
Last Modified Jun 17, 2026 2w ago

Description

In the Linux kernel, the following vulnerability has been resolved: crypto: qat - add param check for DH Reject requests with a source buffer that is bigger than the size of the key. This is to prevent a possible integer underflow that might happen when copying the source scatterlist into a linear buffer.

CVSS Details

Base Score
5.5
Exploitability
1.8
Impact
3.6
Vector string
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Attack Vector Local
Attack Complexity Low
Privileges Required Low
User Interaction None
Scope Unchanged
Confidentiality None
Integrity None
Availability High

Threat Intelligence

EPSS Exploit Probability
15.5% percentile
Exploit & Patch Status
No Known Exploit
Patch Available

Weaknesses 1

CWE-191

Affected Products 2

VendorProductVersionRange
linuxlinux_kernel* <5.15.58
linuxlinux_kernel*≥5.16  –  <5.18.15

References 3

  • git.kernel.org https://git.kernel.org/stable/c/2acbb8771f6ac82422886e63832ee7a0f4b1635b
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/76c9216833e7c20a67c987cf89719a3f01666aaa
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/e7f979ed51f96495328157df663c835b17db1e30
    Patch

Remediation

  • git.kernel.org https://git.kernel.org/stable/c/2acbb8771f6ac82422886e63832ee7a0f4b1635b
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/76c9216833e7c20a67c987cf89719a3f01666aaa
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/e7f979ed51f96495328157df663c835b17db1e30
    Patch