In the Linux kernel, the following vulnerability has been resolved:
crypto: ecdsa - Harden against integer overflows in DIV_ROUND_UP()
Herbert notes that DIV_ROUND_UP() may overflow unnecessarily if an ecdsa implementation's ->key_size() callback returns an unusually large value. Herbert instead suggests (for a division by 8):
X / 8 + !!(X & 7)
Based on this formula, introduce a generic DIV_ROUND_UP_POW2() macro and use it in lieu of DIV_ROUND_UP() for ->key_size() return values.
Additionally, use the macro in ecc_digits_from_bytes(), whose "nbytes" parameter is a ->key_size() return value in some instances, or a user-specified ASN.1 length in the case of ecdsa_get_signature_rs().
CVSS Details
- CVSS 3.1 Base Score: 7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade bpftool6.12-debuginfoUpgrade kernel6.12-tools-debuginfoUpgrade kernel6.12-debuginfo-common-aarch64Upgrade kernel6.12-libbpf-debuginfoUpgrade python3-perf6.12-debuginfoUpgrade kernel6.12-libbpf-develUpgrade bpftool6.12Upgrade perf6.12Upgrade kernel6.12-libbpf-staticUpgrade kernel6.12-libbpfUpgrade kernel-livepatch-6.12.40-63.114Upgrade kernel6.12-modules-extraUpgrade kernel6.12-develUpgrade kernel6.12-modules-extra-commonUpgrade kernel6.12-headersUpgrade python3-perf6.12Upgrade kernel6.12-debuginfoUpgrade kernel6.12-tools-develUpgrade kernel6.12-toolsUpgrade perf6.12-debuginfoUpgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel6.12 | Aug 5, 2025 | May 20, 2025 |
| Debian | — | No solution existsUpgrade linux | May 28, 2025 | May 20, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 20, 2025 |
| Suse | — | Upgrade kernel-symsUpgrade kernel-rt_debug-vdsoUpgrade reiserfs-kmp-azureUpgrade kernel-debug-develUpgrade kernel-rt-livepatch-develUpgrade ocfs2-kmp-rtUpgrade dlm-kmp-defaultUpgrade kernel-default-optionalUpgrade kernel-obs-qaUpgrade kernel-devel-azureUpgrade kernel-rt-develUpgrade dlm-kmp-azureUpgrade kernel-sourceUpgrade dtb-mediatekUpgrade kernel-develUpgrade kernel-macrosUpgrade dtb-amdUpgrade dtb-amlogicUpgrade kernel-64kbUpgrade dtb-hisiliconUpgrade kselftests-kmp-defaultUpgrade kernel-azure-vdsoUpgrade dtb-apmUpgrade dtb-armUpgrade kernel-syms-rtUpgrade kernel-default-develUpgrade kernel-docsUpgrade kernel-kvmsmallUpgrade kernel-default-extraUpgrade kernel-debugUpgrade dtb-xilinxUpgrade kernel-syms-azureUpgrade cluster-md-kmp-defaultUpgrade kernel-zfcpdumpUpgrade kselftests-kmp-rtUpgrade reiserfs-kmp-defaultUpgrade cluster-md-kmp-azureUpgrade gfs2-kmp-rtUpgrade kernel-64kb-optionalUpgrade dtb-socionextUpgrade kernel-kvmsmall-develUpgrade kernel-64kb-develUpgrade kernel-devel-rtUpgrade reiserfs-kmp-rtUpgrade dtb-amazonUpgrade gfs2-kmp-64kbUpgrade cluster-md-kmp-64kbUpgrade cluster-md-kmp-rtUpgrade kernel-source-rtUpgrade dtb-lgUpgrade ocfs2-kmp-azureUpgrade kernel-source-vanillaUpgrade kernel-source-azureUpgrade dtb-caviumUpgrade dtb-broadcomUpgrade dlm-kmp-64kbUpgrade kernel-rt-vdsoUpgrade kernel-rt-extraUpgrade kernel-default-livepatchUpgrade dtb-rockchipUpgrade reiserfs-kmp-64kbUpgrade dtb-appleUpgrade kernel-default-livepatch-develUpgrade kernel-default-base-rebuildUpgrade gfs2-kmp-defaultUpgrade dtb-alteraUpgrade dtb-allwinnerUpgrade kselftests-kmp-azureUpgrade kernel-azure-extraUpgrade kernel-64kb-extraUpgrade kernel-rtUpgrade kernel-default-vdsoUpgrade kernel-azure-optionalUpgrade kselftests-kmp-64kbUpgrade kernel-rt_debug-develUpgrade kernel-rt-optionalUpgrade kernel-kvmsmall-vdsoUpgrade kernel-docs-htmlUpgrade dtb-renesasUpgrade ocfs2-kmp-defaultUpgrade kernel-rt_debugUpgrade kernel-obs-buildUpgrade kernel-default-baseUpgrade kernel-debug-vdsoUpgrade kernel-azure-develUpgrade gfs2-kmp-azureUpgrade dtb-marvellUpgrade dlm-kmp-rtUpgrade dtb-freescaleUpgrade dtb-exynosUpgrade ocfs2-kmp-64kbUpgrade kernel-defaultUpgrade dtb-nvidiaUpgrade kernel-azureUpgrade dtb-sprdUpgrade dtb-qcom | Dec 5, 2025 | Aug 18, 2025 |
| Ubuntu | — | Upgrade linux-image-xilinxUpgrade linux-image-oem-22.04cUpgrade linux-image-6.14.0-1007-azureUpgrade linux-image-ibm-6.8Upgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-gcpUpgrade linux-image-gke-64k-6.8Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-6.14.0-1007-awsUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-aws-64k-6.8Upgrade linux-image-azure-lts-24.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-raspi-realtimeUpgrade linux-image-6.14.0-1007-aws-64kUpgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-oracle-64kUpgrade linux-image-aws-fips-6.8Upgrade linux-image-nvidia-64kUpgrade linux-image-6.14.0-22-genericUpgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-oracle-6.8Upgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-raspi-6.8Upgrade linux-image-realtime-6.8.1Upgrade linux-image-oem-22.04bUpgrade linux-image-virtualUpgrade linux-image-generic-6.8Upgrade linux-image-ibmUpgrade linux-image-kvmUpgrade linux-image-xilinx-6.8Upgrade linux-image-fips-6.8Upgrade linux-image-awsUpgrade linux-image-6.8.0-100-genericUpgrade linux-image-azure-6.8Upgrade linux-image-6.14.0-1008-gcpUpgrade linux-image-realtimeUpgrade linux-image-gcp-6.8Upgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-gke-6.8Upgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-azureUpgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-azure-fdeUpgrade linux-image-aws-64kUpgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-aws-6.8Upgrade linux-image-aws-lts-24.04Upgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-6.8.0-100-fipsUpgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-6.14.0-1007-raspiUpgrade linux-image-ibm-classicUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-generic-64k-6.8Upgrade linux-image-6.8.0-1046-awsUpgrade linux-image-azure-fipsUpgrade linux-image-azure-fips-6.8Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-nvidiaUpgrade linux-image-gkeopUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-generic-lpaeUpgrade linux-image-nvidia-6.8Upgrade linux-image-oem-22.04dUpgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-6.14.0-1007-azure-fdeUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-lowlatencyUpgrade linux-image-intel-iotgUpgrade linux-image-gcp-fipsUpgrade linux-image-6.8.0-1051-azureUpgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-oem-22.04aUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-oem-22.04Upgrade linux-image-gke-64kUpgrade linux-image-genericUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-virtual-6.8Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-lowlatency-64kUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-6.14.0-1007-oracle-64kUpgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-aws-fipsUpgrade linux-image-gkeUpgrade linux-image-gcp-64kUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-raspiUpgrade linux-image-6.14.0-22-generic-64kUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.14.0-1008-gcp-64kUpgrade linux-image-6.14.0-1004-realtimeUpgrade linux-image-6.8.0-1046-azureUpgrade linux-image-oracleUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-lowlatency-6.8Upgrade linux-image-6.14.0-1007-oracleUpgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-generic-64kUpgrade linux-image-fips | Jun 26, 2025 | May 20, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 17, 2026 | May 20, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub