In the Linux kernel, the following vulnerability has been resolved:
crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
When the mpi_ec_ctx structure is initialized, some fields are not cleared, causing a crash when referencing the field when the structure was released. Initially, this issue was ignored because memory for mpi_ec_ctx is allocated with the __GFP_ZERO flag. For example, this error will be triggered when calculating the Za value for SM2 separately.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-debuginfoUpgrade bpftoolUpgrade perfUpgrade bpftool-debuginfoUpgrade kernel-headersUpgrade kernel-tools-develUpgrade kernelUpgrade kernel-tools-debuginfoUpgrade kernel-livepatch-5.15.149-99.161Upgrade kernel-develUpgrade python-perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade python-perfUpgrade kernel-livepatch-5.10.210-201.852Upgrade kernel-tools | Jul 9, 2024 | Mar 18, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-tools-debuginfoUpgrade bpftoolUpgrade kernel-libbpfUpgrade kernel-modules-extraUpgrade kernel-headersUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade python3-perf-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-debuginfoUpgrade perfUpgrade kernel-develUpgrade kernel-libbpf-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-6.1.79-99.164Upgrade kernelUpgrade python3-perfUpgrade kernel-libbpf-staticUpgrade kernel-modules-extra-commonUpgrade kernel-tools-devel | Feb 17, 2025 | Mar 18, 2024 |
| Debian | — | Upgrade linux | May 8, 2024 | Mar 18, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-abi-stablelistsUpgrade kernelUpgrade python3-perfUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel-tools-libs | Jun 26, 2024 | Mar 18, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade bpftoolUpgrade kernel-tools-libsUpgrade python3-perf | Jul 1, 2024 | Mar 18, 2024 |
| Suse | — | Upgrade dtb-rockchipUpgrade reiserfs-kmp-rtUpgrade dtb-caviumUpgrade kernel-64kb-extraUpgrade cluster-md-kmp-rtUpgrade dtb-nvidiaUpgrade reiserfs-kmp-64kbUpgrade kernel-source-vanillaUpgrade kernel-defaultUpgrade ocfs2-kmp-64kbUpgrade dlm-kmp-defaultUpgrade dtb-renesasUpgrade kernel-default-vdsoUpgrade kernel-azureUpgrade dtb-allwinnerUpgrade kernel-debugUpgrade kernel-default-livepatchUpgrade gfs2-kmp-defaultUpgrade kernel-rt-optionalUpgrade kernel-debug-develUpgrade dtb-broadcomUpgrade kernel-rt-extraUpgrade kselftests-kmp-azureUpgrade kernel-docs-htmlUpgrade kernel-rt-livepatchUpgrade kernel-default-baseUpgrade kselftests-kmp-rtUpgrade kernel-rt-vdsoUpgrade dtb-xilinxUpgrade cluster-md-kmp-64kbUpgrade kernel-develUpgrade kernel-source-rtUpgrade kernel-rt_debug-develUpgrade reiserfs-kmp-defaultUpgrade dtb-amdUpgrade kernel-kvmsmall-vdsoUpgrade dtb-alteraUpgrade dlm-kmp-rtUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-sprdUpgrade kernel-azure-optionalUpgrade dtb-appleUpgrade kernel-default-optionalUpgrade ocfs2-kmp-defaultUpgrade kernel-obs-buildUpgrade gfs2-kmp-azureUpgrade kernel-default-livepatch-develUpgrade ocfs2-kmp-azureUpgrade kernel-debug-vdsoUpgrade dtb-lgUpgrade kernel-macrosUpgrade reiserfs-kmp-azureUpgrade kernel-azure-develUpgrade cluster-md-kmp-defaultUpgrade dtb-hisiliconUpgrade dtb-socionextUpgrade dtb-apmUpgrade gfs2-kmp-64kbUpgrade dlm-kmp-azureUpgrade gfs2-kmp-rtUpgrade kernel-symsUpgrade dtb-mediatekUpgrade dtb-marvellUpgrade dlm-kmp-64kbUpgrade kernel-default-develUpgrade kernel-rtUpgrade kernel-obs-qaUpgrade kernel-kvmsmallUpgrade kernel-devel-azureUpgrade kernel-azure-livepatch-develUpgrade dtb-freescaleUpgrade dtb-armUpgrade kernel-syms-rtUpgrade kernel-sourceUpgrade kernel-rt-develUpgrade kernel-default-base-rebuildUpgrade kernel-debug-livepatch-develUpgrade kernel-syms-azureUpgrade kernel-devel-rtUpgrade kernel-kvmsmall-develUpgrade dtb-amazonUpgrade dtb-exynosUpgrade dtb-amlogicUpgrade kernel-docsUpgrade dtb-qcomUpgrade kernel-rt-livepatch-develUpgrade ocfs2-kmp-rtUpgrade kselftests-kmp-64kbUpgrade kernel-zfcpdumpUpgrade kernel-source-azureUpgrade kernel-rt_debug-vdsoUpgrade kernel-azure-vdsoUpgrade kernel-64kb-develUpgrade kernel-kvmsmall-livepatch-develUpgrade cluster-md-kmp-azureUpgrade kselftests-kmp-defaultUpgrade kernel-64kbUpgrade kernel-rt_debugUpgrade kernel-64kb-optionalUpgrade kernel-64kb-livepatch-develUpgrade kernel-default-extraUpgrade kernel-azure-extra | May 15, 2024 | Mar 18, 2024 |
| Ubuntu | — | Upgrade linux-image-6.5.0-1017-laptopUpgrade linux-image-nvidiaUpgrade linux-image-6.5.0-1024-oracle-64kUpgrade linux-image-ibmUpgrade linux-image-6.5.0-41-lowlatencyUpgrade linux-image-5.15.0-1058-kvmUpgrade linux-image-6.5.0-1022-azureUpgrade linux-image-6.5.0-41-genericUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-starfiveUpgrade linux-image-genericUpgrade linux-image-6.5.0-1021-nvidia-64kUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-oem-22.04aUpgrade linux-image-5.15.0-1059-gcpUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-oem-20.04bUpgrade linux-image-lowlatency-64kUpgrade linux-image-raspiUpgrade linux-image-oem-20.04cUpgrade linux-image-generic-64kUpgrade linux-image-5.15.0-106-lowlatencyUpgrade linux-image-nvidia-6.5Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-lowlatencyUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-6.5.0-1024-oracleUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-6.5.0-1022-azure-fdeUpgrade linux-image-5.15.0-106-generic-lpaeUpgrade linux-image-gcpUpgrade linux-image-azure-fdeUpgrade linux-image-aws-lts-22.04Upgrade linux-image-oem-22.04bUpgrade linux-image-azure-lts-22.04Upgrade linux-image-5.15.0-1063-azure-fdeUpgrade linux-image-6.5.0-1015-starfiveUpgrade linux-image-intelUpgrade linux-image-5.15.0-1054-nvidia-lowlatencyUpgrade linux-image-oem-22.04cUpgrade linux-image-5.15.0-1061-awsUpgrade linux-image-oem-22.04Upgrade linux-image-gkeopUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-oem-20.04dUpgrade linux-image-gke-5.15Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-generic-lpaeUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.5.0-41-lowlatency-64kUpgrade linux-image-azureUpgrade linux-image-5.15.0-1054-ibmUpgrade linux-image-5.15.0-106-generic-64kUpgrade linux-image-5.15.0-106-lowlatency-64kUpgrade linux-image-laptop-23.10Upgrade linux-image-6.5.0-41-generic-64kUpgrade linux-image-gkeop-5.15Upgrade linux-image-oem-22.04dUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-5.15.0-1054-raspiUpgrade linux-image-gkeUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-awsUpgrade linux-image-5.15.0-1044-gkeopUpgrade linux-image-6.5.0-1021-awsUpgrade linux-image-kvmUpgrade linux-image-intel-iotgUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-oracle-64kUpgrade linux-image-5.15.0-1054-nvidiaUpgrade linux-image-5.15.0-1059-oracleUpgrade linux-image-5.15.0-1063-azureUpgrade linux-image-6.5.0-1021-nvidiaUpgrade linux-image-5.15.0-1057-intel-iotgUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-oracleUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-6.5.0-1022-gcpUpgrade linux-image-6.5.0-1018-raspiUpgrade linux-image-nvidia-64k-6.5Upgrade linux-image-azure-cvmUpgrade linux-image-5.15.0-1058-intel-iotgUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-6.5.0-1024-oemUpgrade linux-image-5.15.0-106-genericUpgrade linux-image-oem-20.04Upgrade linux-image-5.15.0-1058-gkeUpgrade linux-image-virtualUpgrade linux-image-lowlatency-64k-hwe-22.04 | May 17, 2024 | Mar 18, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 18, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub