An out-of-bounds read flaw was found in the CLARRV, DLARRV, SLARRV, and ZLARRV functions in lapack through version 3.10.0, as also used in OpenBLAS before version 0.3.18. Specially crafted inputs passed to these functions could cause an application using lapack to crash or possibly disclose portions of its memory.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade openblas-serial64Upgrade openblas-threads64_Upgrade openblasUpgrade openblas-develUpgrade openblas-serial64_Upgrade openblas-staticUpgrade openblas-threads64Upgrade openblas-openmpUpgrade openblas-RblasUpgrade openblas-openmp64Upgrade openblas-threadsUpgrade openblas-openmp64_ | Nov 14, 2022 | Dec 8, 2021 |
| Amazon Linux Ami 2 | — | Upgrade openblas-RblasUpgrade openblas-openmp64_Upgrade openblas-staticUpgrade openblas-threads64Upgrade openblas-openmp64Upgrade openblas-threads64_Upgrade openblas-serialUpgrade openblas-serial64_Upgrade openblas-debuginfoUpgrade openblas-threadsUpgrade openblas-openmpUpgrade openblas-develUpgrade openblas-serial64Upgrade openblas | Jan 23, 2024 | Dec 8, 2021 |
| Centos_linux | — | Upgrade openblas-Rblas-debuginfoUpgrade openblas-openmp64_-debuginfoUpgrade openblas-debuginfoUpgrade openblas-debugsourceUpgrade openblas-threads-debuginfoUpgrade openblasUpgrade openblas-threads64-debuginfoUpgrade openblas-openmp-debuginfoUpgrade openblas-serial64-debuginfoUpgrade openblas-serial64_-debuginfoUpgrade openblas-threads64_-debuginfoUpgrade openblas-threadsUpgrade openblas-openmp64-debuginfo | Nov 9, 2022 | Dec 8, 2021 |
| Debian | — | Upgrade lapackUpgrade openblas | Jul 30, 2024 | Dec 8, 2021 |
| Huawei Euleros 2_0_sp10 | — | Upgrade openblas | Apr 20, 2022 | Dec 8, 2021 |
| Huawei Euleros 2_0_sp3 | — | Upgrade blasUpgrade lapack | May 25, 2022 | Dec 8, 2021 |
| Huawei Euleros 2_0_sp5 | — | Upgrade blasUpgrade lapack | Mar 2, 2022 | Dec 8, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade openblas | Mar 3, 2022 | Dec 8, 2021 |
| Oracle_linux | — | Upgrade openblasUpgrade openblas-openmpUpgrade openblas-serial64Upgrade openblas-openmp64Upgrade openblas-RblasUpgrade openblas-serial64_Upgrade openblas-develUpgrade openblas-openmp64_Upgrade openblas-static | Nov 16, 2022 | Sep 30, 2021 |
| Redhat_linux | — | Upgrade openblas-develUpgrade openblas-threads64Upgrade openblas-openmp-debuginfoUpgrade openblas-serial64Upgrade openblas-openmp64_-debuginfoUpgrade openblas-threads64_Upgrade openblas-openmp64Upgrade openblas-staticUpgrade openblas-openmp64_Upgrade openblas-threads64-debuginfoUpgrade openblas-openmpUpgrade openblasUpgrade openblas-RblasNo solution existsUpgrade openblas-serial64_Upgrade openblas-debuginfoUpgrade openblas-threads64_-debuginfoUpgrade openblas-serial64_-debuginfoUpgrade openblas-threads-debuginfoUpgrade openblas-Rblas-debuginfoUpgrade openblas-serial64-debuginfoUpgrade openblas-openmp64-debuginfoUpgrade openblas-threadsUpgrade openblas-debugsource | Nov 9, 2022 | Dec 8, 2021 |
| Rocky_linux | — | Upgrade openblas-serial64_-debuginfoUpgrade openblas-openmpUpgrade openblas-serial64-debuginfoUpgrade openblas-threadsUpgrade openblas-openmp64-debuginfoUpgrade openblasUpgrade openblas-debugsourceUpgrade openblas-threads-debuginfoUpgrade openblas-debuginfoUpgrade openblas-Rblas-debuginfoUpgrade openblas-RblasUpgrade openblas-threads64-debuginfoUpgrade openblas-serial64Upgrade openblas-threads64Upgrade openblas-develUpgrade openblas-threads64_-debuginfoUpgrade openblas-staticUpgrade openblas-openmp64_-debuginfoUpgrade openblas-serial64_Upgrade openblas-threads64_Upgrade openblas-openmp64Upgrade openblas-openmp64_Upgrade openblas-openmp-debuginfo | Mar 12, 2024 | Dec 8, 2021 |
| Suse | — | Upgrade lapack-devel-staticUpgrade libopenblas_openmp-develUpgrade liblapacke3-32bitUpgrade libblas3Upgrade blas-develUpgrade lapacke-devel-staticUpgrade lapacke-develUpgrade liblapack3-32bitUpgrade libblas3-32bitUpgrade blas-devel-32bitUpgrade lapack-devel-32bitUpgrade liblapack3Upgrade cblas-develUpgrade libcblas3Upgrade libopenblas_pthreads0Upgrade libopenblas_openmp0Upgrade blas-manUpgrade lapack-manUpgrade lapacke-devel-32bitUpgrade lapack-develUpgrade blas-devel-staticUpgrade liblapacke3Upgrade libopenblas_pthreads-develUpgrade openblas-common-devel | Mar 22, 2022 | Dec 8, 2021 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | Dec 8, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Dec 8, 2021 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub