Linux Distros Unpatched Vulnerability : CVE-2023-54325

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - crypto: qat - fix out-of-bounds read When preparing an AER-CTR request, the driver copies the key provided by the user into a data structure that is accessible ...

CVE-2023-54325

The CVE pertains to the Linux kernel crypto/qat driver (qat_alg_skcipher_init_com) where an AER-CTR key copy could read beyond bounds for QAT GEN4 when the key length is rounded up before copying. The root cause is copying the user-provided key into a firmware-accessible structure with a rounded-...