In the Linux kernel, the following vulnerability has been resolved:
crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
When the mpi_ec_ctx structure is initialized, some fields are not cleared, causing a crash when referencing the field when the structure was released. Initially, this issue was ignored because memory for mpi_ec_ctx is allocated with the __GFP_ZERO flag. For example, this error will be triggered when calculating the Za value for SM2 separately.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade kernel-livepatch-5.10.210-201.852Upgrade python-perfUpgrade perfUpgrade bpftool-debuginfoUpgrade kernel-headersUpgrade kernel-debuginfo-common-aarch64Upgrade bpftoolUpgrade kernel-debuginfoUpgrade kernel-develUpgrade kernel-livepatch-5.15.149-99.161Upgrade kernel-tools-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-tools-develUpgrade perf-debuginfoUpgrade kernel | Jul 9, 2024 | Mar 18, 2024 |
| Amazon_linux_2023 | — | Upgrade perf-debuginfoUpgrade kernel-libbpfUpgrade kernel-tools-debuginfoUpgrade python3-perf-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-headersUpgrade bpftoolUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade kernel-modules-extraUpgrade kernel-debuginfoUpgrade kernel-tools-develUpgrade python3-perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-6.1.79-99.164Upgrade perfUpgrade kernel-modules-extra-commonUpgrade kernel-libbpf-staticUpgrade kernel-libbpf-develUpgrade kernelUpgrade kernel-devel | Feb 17, 2025 | Mar 18, 2024 |
| Debian | — | Upgrade linux | May 8, 2024 | Mar 18, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-toolsUpgrade bpftoolUpgrade python3-perfUpgrade kernel-tools-libs | Jun 26, 2024 | Mar 18, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade bpftoolUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-tools | Jul 1, 2024 | Mar 18, 2024 |
| Suse | — | Upgrade kernel-debug-vdsoUpgrade kernel-default-optionalUpgrade dtb-alteraUpgrade kernel-kvmsmall-vdsoUpgrade dtb-renesasUpgrade dtb-rockchipUpgrade ocfs2-kmp-defaultUpgrade dtb-allwinnerUpgrade kernel-default-livepatch-develUpgrade kernel-default-vdsoUpgrade kernel-rt_debug-develUpgrade dtb-sprdUpgrade kernel-azure-optionalUpgrade dlm-kmp-defaultUpgrade reiserfs-kmp-defaultUpgrade dlm-kmp-rtUpgrade dtb-broadcomUpgrade kernel-debug-develUpgrade kselftests-kmp-rtUpgrade kernel-azureUpgrade kernel-rt-extraUpgrade ocfs2-kmp-azureUpgrade dtb-appleUpgrade kernel-source-rtUpgrade cluster-md-kmp-64kbUpgrade kernel-rt_debug-livepatch-develUpgrade reiserfs-kmp-rtUpgrade cluster-md-kmp-rtUpgrade ocfs2-kmp-64kbUpgrade reiserfs-kmp-64kbUpgrade kernel-source-vanillaUpgrade gfs2-kmp-azureUpgrade kernel-obs-buildUpgrade kernel-defaultUpgrade kernel-64kb-extraUpgrade gfs2-kmp-defaultUpgrade kernel-default-livepatchUpgrade kernel-develUpgrade kernel-docs-htmlUpgrade kernel-rt-livepatchUpgrade kselftests-kmp-azureUpgrade kernel-debugUpgrade dtb-amdUpgrade dtb-nvidiaUpgrade dtb-xilinxUpgrade kernel-default-baseUpgrade kernel-rt-vdsoUpgrade kernel-rt-optionalUpgrade dtb-caviumUpgrade kernel-docsUpgrade dtb-lgUpgrade kernel-default-base-rebuildUpgrade kernel-azure-vdsoUpgrade kernel-rt_debug-vdsoUpgrade kselftests-kmp-defaultUpgrade kernel-rtUpgrade kernel-rt-livepatch-develUpgrade kernel-kvmsmall-livepatch-develUpgrade cluster-md-kmp-azureUpgrade gfs2-kmp-64kbUpgrade dtb-apmUpgrade reiserfs-kmp-azureUpgrade kernel-64kb-develUpgrade kernel-source-azureUpgrade kernel-zfcpdumpUpgrade dtb-armUpgrade kernel-azure-livepatch-develUpgrade dtb-freescaleUpgrade dlm-kmp-azureUpgrade kernel-obs-qaUpgrade kernel-kvmsmallUpgrade kernel-devel-azureUpgrade kernel-syms-azureUpgrade dtb-amazonUpgrade kernel-devel-rtUpgrade kernel-symsUpgrade gfs2-kmp-rtUpgrade dtb-exynosUpgrade kernel-kvmsmall-develUpgrade kernel-64kb-optionalUpgrade dtb-hisiliconUpgrade cluster-md-kmp-defaultUpgrade kernel-default-extraUpgrade kernel-default-develUpgrade dlm-kmp-64kbUpgrade kernel-azure-extraUpgrade dtb-socionextUpgrade dtb-marvellUpgrade kernel-64kb-livepatch-develUpgrade kselftests-kmp-64kbUpgrade dtb-qcomUpgrade kernel-azure-develUpgrade kernel-debug-livepatch-develUpgrade dtb-mediatekUpgrade kernel-syms-rtUpgrade kernel-rt-develUpgrade kernel-macrosUpgrade ocfs2-kmp-rtUpgrade dtb-amlogicUpgrade kernel-sourceUpgrade kernel-rt_debugUpgrade kernel-64kb | May 15, 2024 | Mar 18, 2024 |
| Ubuntu | — | Upgrade linux-image-5.15.0-106-generic-lpaeUpgrade linux-image-intelUpgrade linux-image-oem-22.04aUpgrade linux-image-lowlatencyUpgrade linux-image-oem-22.04Upgrade linux-image-azureUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-azure-fdeUpgrade linux-image-oem-20.04bUpgrade linux-image-6.5.0-41-lowlatencyUpgrade linux-image-oem-20.04cUpgrade linux-image-6.5.0-1024-oracle-64kUpgrade linux-image-5.15.0-1059-gcpUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.15.0-106-lowlatencyUpgrade linux-image-genericUpgrade linux-image-generic-lpaeUpgrade linux-image-6.5.0-1021-nvidia-64kUpgrade linux-image-6.5.0-1017-laptopUpgrade linux-image-6.5.0-1022-azureUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-raspiUpgrade linux-image-gke-5.15Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-nvidiaUpgrade linux-image-gcpUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.5.0-1024-oracleUpgrade linux-image-generic-64kUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-oem-22.04cUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-nvidia-6.5Upgrade linux-image-gkeopUpgrade linux-image-lowlatency-64kUpgrade linux-image-ibmUpgrade linux-image-5.15.0-1058-kvmUpgrade linux-image-6.5.0-41-genericUpgrade linux-image-starfiveUpgrade linux-image-5.15.0-1054-nvidia-lowlatencyUpgrade linux-image-5.15.0-1063-azure-fdeUpgrade linux-image-aws-lts-22.04Upgrade linux-image-6.5.0-41-lowlatency-64kUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-oem-22.04bUpgrade linux-image-6.5.0-1015-starfiveUpgrade linux-image-oem-20.04dUpgrade linux-image-5.15.0-1061-awsUpgrade linux-image-azure-lts-22.04Upgrade linux-image-6.5.0-1022-azure-fdeUpgrade linux-image-5.15.0-1044-gkeopUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.5.0-1018-raspiUpgrade linux-image-gkeop-5.15Upgrade linux-image-laptop-23.10Upgrade linux-image-5.15.0-106-lowlatency-64kUpgrade linux-image-5.15.0-1054-ibmUpgrade linux-image-awsUpgrade linux-image-gkeUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-oem-22.04dUpgrade linux-image-5.15.0-1054-nvidiaUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.5.0-1021-awsUpgrade linux-image-azure-cvmUpgrade linux-image-6.5.0-41-generic-64kUpgrade linux-image-6.5.0-1022-gcpUpgrade linux-image-5.15.0-1057-intel-iotgUpgrade linux-image-6.5.0-1021-nvidiaUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-oracleUpgrade linux-image-5.15.0-106-generic-64kUpgrade linux-image-5.15.0-1059-oracleUpgrade linux-image-nvidia-64k-6.5Upgrade linux-image-5.15.0-1054-raspiUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.15.0-1063-azureUpgrade linux-image-intel-iotgUpgrade linux-image-kvmUpgrade linux-image-raspi-nolpaeUpgrade linux-image-oracle-64kUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-virtualUpgrade linux-image-oem-20.04Upgrade linux-image-5.15.0-106-genericUpgrade linux-image-6.5.0-1024-oemUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.15.0-1058-intel-iotgUpgrade linux-image-5.15.0-1058-gke | May 17, 2024 | Mar 18, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 18, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub