The Linux kernel contained a vulnerability in the keyctl_pkey_params_get_2() function where the internal output buffer length was calculated incorrectly. This miscalculation could cause a buffer overflow when the provided buffer was too small. The vulnerability was addressed by changing the allocation to use the maximum length of the cryptographic primitive, preventing overflow conditions.

An attacker could potentially exploit the incorrect buffer length calculation to cause a buffer overflow, which may lead to memory corruption. The exact impact is not detailed in the provided data, and no known exploits in the wild have been reported.

A fix for this vulnerability has been implemented in the Linux kernel by correcting the buffer allocation logic. Users should apply the official kernel updates that include this fix. Patch status is not explicitly confirmed in the provided data; therefore, check the vendor advisory or Linux kernel mailing lists for the specific fixed versions and apply updates accordingly.