PT-2025-8499 · Linux+3 · Linux Kernel+3
Published
2022-01-01
·
Updated
2026-03-14
·
CVE-2022-49566
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
A memory leak issue in the Linux kernel's crypto subsystem, specifically in the QAT (Quick Assist Technology) RSA implementation, has been identified. When an RSA key in form 2, as defined in PKCS #1 V2.1, is used, certain components of the private key remain even after the TFM (Transform Feedback Matrix) is released. This occurs due to incomplete buffer freeing in the
qat rsa exit tfm() function.Recommendations
Replace the explicit buffer freeing calls in
qat rsa exit tfm() with a call to qat rsa clear ctx(), which properly frees all buffers referenced in the TFM context.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.Exploit
Memory Leak
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Astra Linux
Debian
Linux Kernel
Suse