In the Linux kernel, the following vulnerability has been resolved:
crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
When the mpi_ec_ctx structure is initialized, some fields are not cleared, causing a crash when referencing the field when the structure was released. Initially, this issue was ignored because memory for mpi_ec_ctx is allocated with the __GFP_ZERO flag. For example, this error will be triggered when calculating the Za value for SM2 separately.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade python-perfUpgrade kernel-livepatch-5.10.210-201.852Upgrade python-perf-debuginfoUpgrade kernel-tools-develUpgrade kernelUpgrade kernel-headersUpgrade kernel-tools-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-livepatch-5.15.149-99.161Upgrade kernel-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade bpftoolUpgrade perf-debuginfoUpgrade perfUpgrade kernel-devel | Jul 9, 2024 | Mar 18, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-libbpf-staticUpgrade kernel-livepatch-6.1.79-99.164Upgrade kernel-modules-extra-commonUpgrade kernel-tools-develUpgrade perfUpgrade python3-perfUpgrade kernel-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-libbpf-develUpgrade kernelUpgrade perf-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-modules-extraUpgrade bpftoolUpgrade kernel-libbpfUpgrade kernel-tools-debuginfoUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-headers | Feb 17, 2025 | Mar 18, 2024 |
| Debian | — | Upgrade linux | May 8, 2024 | Mar 18, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel-abi-stablelistsUpgrade kernel | Jun 26, 2024 | Mar 18, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade bpftoolUpgrade kernel-tools-libsUpgrade python3-perf | Jul 1, 2024 | Mar 18, 2024 |
| Suse | — | Upgrade kernel-rt-vdsoUpgrade kernel-docs-htmlUpgrade gfs2-kmp-defaultUpgrade kernel-debugUpgrade dlm-kmp-defaultUpgrade kernel-develUpgrade kernel-default-livepatch-develUpgrade kernel-default-vdsoUpgrade kernel-rt_debug-develUpgrade kernel-rt-optionalUpgrade dlm-kmp-rtUpgrade dtb-renesasUpgrade dtb-allwinnerUpgrade dtb-rockchipUpgrade kernel-rt-livepatchUpgrade ocfs2-kmp-azureUpgrade kernel-azureUpgrade kselftests-kmp-azureUpgrade kernel-rt-extraUpgrade dtb-broadcomUpgrade dtb-amdUpgrade dtb-nvidiaUpgrade kernel-default-baseUpgrade kernel-default-livepatchUpgrade dtb-xilinxUpgrade reiserfs-kmp-defaultUpgrade kernel-source-rtUpgrade reiserfs-kmp-rtUpgrade kernel-debug-develUpgrade kselftests-kmp-rtUpgrade dtb-caviumUpgrade kernel-obs-buildUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-sprdUpgrade kernel-azure-optionalUpgrade dtb-appleUpgrade kernel-debug-vdsoUpgrade reiserfs-kmp-64kbUpgrade ocfs2-kmp-defaultUpgrade dtb-alteraUpgrade kernel-default-optionalUpgrade ocfs2-kmp-64kbUpgrade kernel-64kb-extraUpgrade cluster-md-kmp-rtUpgrade gfs2-kmp-azureUpgrade kernel-kvmsmall-vdsoUpgrade cluster-md-kmp-64kbUpgrade kernel-defaultUpgrade kernel-source-vanillaUpgrade kernel-symsUpgrade kernel-default-develUpgrade kernel-kvmsmallUpgrade dlm-kmp-azureUpgrade kernel-64kb-livepatch-develUpgrade kernel-64kb-optionalUpgrade kernel-azure-extraUpgrade dtb-socionextUpgrade dtb-marvellUpgrade dlm-kmp-64kbUpgrade dtb-hisiliconUpgrade cluster-md-kmp-defaultUpgrade kernel-default-extraUpgrade cluster-md-kmp-azureUpgrade kernel-docsUpgrade kernel-azure-develUpgrade dtb-mediatekUpgrade kernel-debug-livepatch-develUpgrade kernel-syms-rtUpgrade kernel-sourceUpgrade kernel-rt-develUpgrade kernel-default-base-rebuildUpgrade dtb-amlogicUpgrade kernel-64kbUpgrade kselftests-kmp-defaultUpgrade kernel-rt_debugUpgrade dtb-amazonUpgrade gfs2-kmp-rtUpgrade ocfs2-kmp-rtUpgrade kernel-rt-livepatch-develUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-qcomUpgrade kernel-rt_debug-vdsoUpgrade gfs2-kmp-64kbUpgrade dtb-apmUpgrade kernel-macrosUpgrade kernel-azure-vdsoUpgrade dtb-lgUpgrade reiserfs-kmp-azureUpgrade kselftests-kmp-64kbUpgrade kernel-64kb-develUpgrade kernel-devel-rtUpgrade kernel-syms-azureUpgrade kernel-source-azureUpgrade kernel-zfcpdumpUpgrade kernel-kvmsmall-develUpgrade dtb-exynosUpgrade kernel-obs-qaUpgrade kernel-rtUpgrade kernel-devel-azureUpgrade kernel-azure-livepatch-develUpgrade dtb-freescaleUpgrade dtb-arm | May 15, 2024 | Mar 18, 2024 |
| Ubuntu | — | Upgrade linux-image-5.15.0-1044-gkeopUpgrade linux-image-awsUpgrade linux-image-oem-20.04Upgrade linux-image-6.5.0-1024-oemUpgrade linux-image-5.15.0-1058-intel-iotgUpgrade linux-image-6.5.0-1018-raspiUpgrade linux-image-5.15.0-1058-gkeUpgrade linux-image-oracle-64kUpgrade linux-image-5.15.0-106-genericUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-virtualUpgrade linux-image-5.15.0-106-lowlatency-64kUpgrade linux-image-oem-22.04dUpgrade linux-image-5.15.0-1054-ibmUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-6.5.0-41-generic-64kUpgrade linux-image-laptop-23.10Upgrade linux-image-intel-iotgUpgrade linux-image-5.15.0-106-generic-64kUpgrade linux-image-5.15.0-1063-azureUpgrade linux-image-nvidia-64k-6.5Upgrade linux-image-5.15.0-1057-intel-iotgUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-6.5.0-1022-gcpUpgrade linux-image-5.15.0-1059-oracleUpgrade linux-image-5.15.0-1054-raspiUpgrade linux-image-6.5.0-1021-awsUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-kvmUpgrade linux-image-6.5.0-1021-nvidiaUpgrade linux-image-gkeUpgrade linux-image-azure-cvmUpgrade linux-image-oracleUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.15.0-1054-nvidiaUpgrade linux-image-5.15.0-106-generic-lpaeUpgrade linux-image-azure-lts-22.04Upgrade linux-image-6.5.0-41-lowlatency-64kUpgrade linux-image-6.5.0-1021-nvidia-64kUpgrade linux-image-genericUpgrade linux-image-5.15.0-1061-awsUpgrade linux-image-oem-22.04bUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-5.15.0-1059-gcpUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-oem-20.04bUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-starfiveUpgrade linux-image-aws-lts-22.04Upgrade linux-image-azure-fdeUpgrade linux-image-oem-20.04dUpgrade linux-image-raspiUpgrade linux-image-intelUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.5.0-1024-oracle-64kUpgrade linux-image-6.5.0-1017-laptopUpgrade linux-image-5.15.0-106-lowlatencyUpgrade linux-image-6.5.0-41-genericUpgrade linux-image-gkeopUpgrade linux-image-5.15.0-1058-kvmUpgrade linux-image-ibmUpgrade linux-image-5.15.0-1063-azure-fdeUpgrade linux-image-6.5.0-41-lowlatencyUpgrade linux-image-oem-22.04aUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-nvidia-6.5Upgrade linux-image-6.5.0-1022-azureUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-gcpUpgrade linux-image-generic-64kUpgrade linux-image-6.5.0-1024-oracleUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-generic-lpaeUpgrade linux-image-azureUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-gke-5.15Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-nvidiaUpgrade linux-image-oem-22.04cUpgrade linux-image-lowlatencyUpgrade linux-image-oem-22.04Upgrade linux-image-6.5.0-1022-azure-fdeUpgrade linux-image-5.15.0-1054-nvidia-lowlatencyUpgrade linux-image-6.5.0-1015-starfiveUpgrade linux-image-oem-20.04c | May 17, 2024 | Mar 18, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 18, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub