In the Linux kernel, the following vulnerability has been resolved:
crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
When the mpi_ec_ctx structure is initialized, some fields are not cleared, causing a crash when referencing the field when the structure was released. Initially, this issue was ignored because memory for mpi_ec_ctx is allocated with the __GFP_ZERO flag. For example, this error will be triggered when calculating the Za value for SM2 separately.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-toolsUpgrade python-perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-5.10.210-201.852Upgrade perfUpgrade kernel-tools-develUpgrade bpftoolUpgrade kernel-develUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade kernel-debuginfo-common-aarch64Upgrade kernelUpgrade perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade python-perf-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-livepatch-5.15.149-99.161 | Jul 9, 2024 | Mar 18, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-headersUpgrade perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-tools-debuginfoUpgrade python3-perf-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-libbpfUpgrade bpftoolUpgrade kernel-modules-extraUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade kernel-modules-extra-commonUpgrade kernel-tools-develUpgrade perfUpgrade kernel-livepatch-6.1.79-99.164Upgrade kernelUpgrade kernel-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-libbpf-develUpgrade python3-perfUpgrade kernel-libbpf-static | Feb 17, 2025 | Mar 18, 2024 |
| Debian | — | Upgrade linux | May 8, 2024 | Mar 18, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-abi-stablelistsUpgrade kernelUpgrade bpftoolUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-tools | Jun 26, 2024 | Mar 18, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade python3-perfUpgrade kernelUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel-abi-stablelistsUpgrade kernel-tools | Jul 1, 2024 | Mar 18, 2024 |
| Suse | — | Upgrade dtb-freescaleUpgrade kernel-rt-livepatch-develUpgrade cluster-md-kmp-azureUpgrade kernel-source-azureUpgrade kernel-zfcpdumpUpgrade kernel-rt_debug-vdsoUpgrade kselftests-kmp-64kbUpgrade kernel-rt_debugUpgrade kernel-azure-vdsoUpgrade kernel-kvmsmall-livepatch-develUpgrade ocfs2-kmp-rtUpgrade kernel-azure-livepatch-develUpgrade dtb-marvellUpgrade kernel-64kbUpgrade kselftests-kmp-defaultUpgrade kernel-64kb-develUpgrade dtb-qcomUpgrade kernel-docsUpgrade reiserfs-kmp-azureUpgrade dtb-hisiliconUpgrade kernel-azure-extraUpgrade cluster-md-kmp-defaultUpgrade kernel-rt-develUpgrade kernel-syms-rtUpgrade kernel-64kb-livepatch-develUpgrade dlm-kmp-64kbUpgrade kernel-default-base-rebuildUpgrade kernel-macrosUpgrade kernel-debug-livepatch-develUpgrade dtb-mediatekUpgrade gfs2-kmp-64kbUpgrade kernel-sourceUpgrade kernel-azure-develUpgrade kernel-64kb-optionalUpgrade gfs2-kmp-rtUpgrade dtb-amazonUpgrade dtb-exynosUpgrade kernel-devel-rtUpgrade dtb-armUpgrade kernel-kvmsmall-develUpgrade kernel-symsUpgrade kernel-syms-azureUpgrade kernel-kvmsmallUpgrade kernel-rtUpgrade kernel-devel-azureUpgrade kernel-obs-qaUpgrade dlm-kmp-azureUpgrade dtb-apmUpgrade kernel-default-extraUpgrade kernel-default-develUpgrade dtb-amlogicUpgrade dtb-lgUpgrade dtb-socionextUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-caviumUpgrade dtb-sprdUpgrade kernel-rt-extraUpgrade kernel-defaultUpgrade gfs2-kmp-azureUpgrade cluster-md-kmp-rtUpgrade ocfs2-kmp-64kbUpgrade kernel-64kb-extraUpgrade reiserfs-kmp-defaultUpgrade kernel-source-rtUpgrade reiserfs-kmp-64kbUpgrade kernel-source-vanillaUpgrade kernel-develUpgrade gfs2-kmp-defaultUpgrade kernel-rt-optionalUpgrade reiserfs-kmp-rtUpgrade kernel-debugUpgrade kernel-default-livepatchUpgrade dlm-kmp-defaultUpgrade dtb-rockchipUpgrade ocfs2-kmp-azureUpgrade kernel-rt_debug-develUpgrade kernel-default-vdsoUpgrade kernel-default-livepatch-develUpgrade kernel-azureUpgrade dtb-renesasUpgrade dtb-allwinnerUpgrade kselftests-kmp-rtUpgrade cluster-md-kmp-64kbUpgrade dlm-kmp-rtUpgrade kernel-debug-develUpgrade kernel-rt-livepatchUpgrade dtb-amdUpgrade kernel-rt-vdsoUpgrade kernel-docs-htmlUpgrade kernel-default-baseUpgrade dtb-xilinxUpgrade dtb-nvidiaUpgrade dtb-broadcomUpgrade kselftests-kmp-azureUpgrade kernel-obs-buildUpgrade ocfs2-kmp-defaultUpgrade kernel-kvmsmall-vdsoUpgrade kernel-default-optionalUpgrade kernel-debug-vdsoUpgrade kernel-azure-optionalUpgrade dtb-appleUpgrade dtb-altera | May 15, 2024 | Mar 18, 2024 |
| Ubuntu | — | Upgrade linux-image-5.15.0-106-generic-lpaeUpgrade linux-image-nvidiaUpgrade linux-image-6.5.0-1024-oracle-64kUpgrade linux-image-raspiUpgrade linux-image-oem-22.04bUpgrade linux-image-6.5.0-1024-oracleUpgrade linux-image-6.5.0-1022-azureUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-5.15.0-1054-nvidia-lowlatencyUpgrade linux-image-lowlatencyUpgrade linux-image-azure-fdeUpgrade linux-image-starfiveUpgrade linux-image-oem-22.04aUpgrade linux-image-gke-5.15Upgrade linux-image-6.5.0-1017-laptopUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-ibmUpgrade linux-image-nvidia-6.5Upgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-oem-20.04cUpgrade linux-image-intelUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-6.5.0-1022-azure-fdeUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-oem-20.04dUpgrade linux-image-6.5.0-41-lowlatencyUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-generic-lpaeUpgrade linux-image-gcpUpgrade linux-image-generic-64kUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-6.5.0-1021-nvidia-64kUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.5.0-1015-starfiveUpgrade linux-image-oem-22.04Upgrade linux-image-oem-22.04cUpgrade linux-image-5.15.0-1059-gcpUpgrade linux-image-5.15.0-106-lowlatencyUpgrade linux-image-azureUpgrade linux-image-azure-lts-22.04Upgrade linux-image-5.15.0-1061-awsUpgrade linux-image-6.5.0-41-lowlatency-64kUpgrade linux-image-5.15.0-1058-kvmUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-5.15.0-1063-azure-fdeUpgrade linux-image-oem-20.04bUpgrade linux-image-6.5.0-41-genericUpgrade linux-image-gkeopUpgrade linux-image-genericUpgrade linux-image-gkeop-5.15Upgrade linux-image-6.5.0-1021-awsUpgrade linux-image-oracle-64kUpgrade linux-image-laptop-23.10Upgrade linux-image-5.15.0-1054-ibmUpgrade linux-image-oem-22.04dUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-5.15.0-1054-nvidiaUpgrade linux-image-virtualUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-azure-cvmUpgrade linux-image-5.15.0-1059-oracleUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-6.5.0-1022-gcpUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-oracleUpgrade linux-image-intel-iotgUpgrade linux-image-5.15.0-1057-intel-iotgUpgrade linux-image-oem-20.04Upgrade linux-image-kvmUpgrade linux-image-nvidia-64k-6.5Upgrade linux-image-5.15.0-106-genericUpgrade linux-image-5.15.0-1058-gkeUpgrade linux-image-6.5.0-1024-oemUpgrade linux-image-5.15.0-1058-intel-iotgUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-gkeUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.15.0-1054-raspiUpgrade linux-image-6.5.0-41-generic-64kUpgrade linux-image-6.5.0-1021-nvidiaUpgrade linux-image-5.15.0-1044-gkeopUpgrade linux-image-5.15.0-1063-azureUpgrade linux-image-5.15.0-106-generic-64kUpgrade linux-image-awsUpgrade linux-image-6.5.0-1018-raspiUpgrade linux-image-5.15.0-106-lowlatency-64k | May 17, 2024 | Mar 18, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 18, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub