Description
Improper buffer restrictions in the Intel(R) QAT Engine for OpenSSL before version 0.6.16 may allow a privileged user to potentially enable escalation of privilege via network access.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | Intel(R) QAT Engine for OpenSSL | before version 0.6.16 | — |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 15 SP4 | qatengine | 0.6.10-150400.3.3.1 | SUSE-SU-2023:3290-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Leap 15.4 | qatengine | 0.6.10-150400.3.3.1 | SUSE-SU-2023:3290-1 |
Advisories 1
- SUSE-SU-2023:3290-1 Security update for qatengine SUSE / openSUSE Security Updates · Feb 4, 2026