CVE-2023-54325: 
Linux Kernel vulnerability analysis and mitigation

CVE-2023-54325 is an out-of-bounds read vulnerability in the Linux kernel's Intel QAT (Quick Assist Technology) crypto driver (crypto/qat). The flaw occurs in the qat_alg_skcipher_init_com function when preparing an AES-CTR request for QAT GEN4 devices, where the key size is rounded up before the memory copy, potentially reading beyond the bounds of the source key buffer. It affects the Linux kernel and was published on December 30, 2025. The CVSS category is estimated as Medium, with an EPSS score of 0.000180 (Feedly, CVE.org).

The root cause is a classic out-of-bounds read (CWE-125) in the qat_alg_skcipher_init_com function within the intel_qat kernel module. When the target device is QAT GEN4, the driver rounds up the key size by 16 bytes to meet firmware expectations. If this rounded-up size is used as the length argument to memcpy before the actual copy, the read operation may extend beyond the allocated key buffer into adjacent global memory. KASAN detected this as a global-out-of-bounds read of 32 bytes at a specific kernel address during cryptomgr_test execution. The fix reorders operations so the key is copied first using the original size, and only then is keylen updated to the rounded-up value (Feedly, Infinitsec).

Exploitation of this vulnerability could allow a local user or process with access to the QAT crypto interface to trigger an out-of-bounds memory read in the kernel, potentially exposing sensitive data from adjacent kernel memory regions. In the worst case, this could lead to information disclosure of cryptographic key material or other kernel data. The vulnerability does not directly enable code execution or privilege escalation, but memory disclosure could assist in bypassing kernel security mitigations (Feedly, Infinitsec).

The fix has been committed to the Linux kernel stable tree, reordering the memcpy and keylen update in qat_alg_skcipher_init_com so the copy uses the original key size before rounding up. Administrators should apply the relevant stable kernel patches (commits 2b1501f, 7697139, dc3809f, f6044cc on kernel.org). Users running systems with Intel QAT GEN4 hardware should prioritize updating to a patched kernel version. As a temporary workaround, disabling the intel_qat kernel module on affected systems can mitigate exposure if QAT acceleration is not required (Kernel Commits, Feedly).

Coverage of CVE-2023-54325 has been limited to automated vulnerability tracking platforms and a brief technical blog post. No significant vendor statements, notable researcher commentary, or broad media coverage has been identified beyond standard kernel patch tracking (Infinitsec).