Linux Kernel QAT DHReject Request Integer Underflow Vulnerability

A vulnerability in the Linux kernel's crypto subsystem, specifically related to the QuickAssist Technology (QAT) driver, has been addressed. The issue involved a lack of parameter validation for DHReject requests when the source buffer exceeded the key size. This oversight could lead to an integer underflow during the process of copying the source scatterlist into a linear buffer.

Impact

Exploitation of this vulnerability could have caused an integer underflow, potentially leading to memory corruption or other unintended behavior in the kernel.