What’s Vulnerable › Vulnerabilities

CVE-2022-49564: crypto: qat - add param check for DH

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-02-26 · updated 2026-08-04
• Weakness: CWE-191

Description

In the Linux kernel, the following vulnerability has been resolved: crypto: qat - add param check for DH Reject requests with a source buffer that is bigger than the size of the key. This is to prevent a possible integer underflow that might happen when copying the source scatterlist into a linear buffer.

Affected products

• Linux kernel: before 5.15.58; from 5.16 before 5.18.15 — fixed in 5.15.58, 5.18.15

How to fix

Upgrade to a fixed version: Linux kernel 5.15.58, 5.18.15. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/2acbb8771f6ac82422886e63832ee7a0f4b1635b
• https://git.kernel.org/stable/c/76c9216833e7c20a67c987cf89719a3f01666aaa
• https://git.kernel.org/stable/c/e7f979ed51f96495328157df663c835b17db1e30

Get alerted when CVE-2022-49564 or the next vulnerability affects your stack