In the Linux kernel, the following vulnerability has been resolved:
crypto: ecdsa - Harden against integer overflows in DIV_ROUND_UP()
Herbert notes that DIV_ROUND_UP() may overflow unnecessarily if an ecdsa implementation's ->key_size() callback returns an unusually large value. Herbert instead suggests (for a division by 8):
X / 8 + !!(X & 7)
Based on this formula, introduce a generic DIV_ROUND_UP_POW2() macro and use it in lieu of DIV_ROUND_UP() for ->key_size() return values.
Additionally, use the macro in ecc_digits_from_bytes(), whose "nbytes" parameter is a ->key_size() return value in some instances, or a user-specified ASN.1 length in the case of ecdsa_get_signature_rs().
CVSS Details
- CVSS 3.1 Base Score: 7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade kernel6.12-tools-develUpgrade kernel6.12-develUpgrade kernel6.12-headersUpgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel6.12-debuginfoUpgrade kernel6.12-toolsUpgrade perf6.12-debuginfoUpgrade kernel6.12Upgrade kernel6.12-modules-extra-commonUpgrade python3-perf6.12Upgrade bpftool6.12-debuginfoUpgrade kernel-livepatch-6.12.40-63.114Upgrade kernel6.12-libbpf-debuginfoUpgrade kernel6.12-tools-debuginfoUpgrade python3-perf6.12-debuginfoUpgrade kernel6.12-libbpf-develUpgrade kernel6.12-modules-extraUpgrade bpftool6.12Upgrade kernel6.12-libbpf-staticUpgrade perf6.12Upgrade kernel6.12-libbpfUpgrade kernel6.12-debuginfo-common-aarch64 | Aug 5, 2025 | May 20, 2025 |
| Debian | — | No solution existsUpgrade linux | May 28, 2025 | May 20, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 20, 2025 |
| Suse | — | Upgrade reiserfs-kmp-64kbUpgrade dlm-kmp-rtUpgrade dtb-lgUpgrade kernel-source-rtUpgrade dlm-kmp-64kbUpgrade gfs2-kmp-azureUpgrade kernel-azure-develUpgrade dtb-marvellUpgrade kernel-obs-buildUpgrade ocfs2-kmp-defaultUpgrade kernel-debug-vdsoUpgrade kernel-rt_debugUpgrade kernel-default-baseUpgrade dtb-rockchipUpgrade kernel-default-livepatchUpgrade dtb-renesasUpgrade kernel-rt-optionalUpgrade kselftests-kmp-64kbUpgrade kernel-azure-optionalUpgrade kernel-rtUpgrade kernel-default-vdsoUpgrade kernel-rt_debug-develUpgrade kernel-docs-htmlUpgrade gfs2-kmp-defaultUpgrade kernel-default-base-rebuildUpgrade ocfs2-kmp-azureUpgrade dtb-appleUpgrade kernel-source-azureUpgrade kernel-source-vanillaUpgrade kernel-default-livepatch-develUpgrade kernel-kvmsmall-vdsoUpgrade dtb-broadcomUpgrade cluster-md-kmp-64kbUpgrade ocfs2-kmp-64kbUpgrade dtb-qcomUpgrade kernel-rt-vdsoUpgrade dtb-exynosUpgrade dtb-freescaleUpgrade dtb-sprdUpgrade kernel-azureUpgrade dtb-allwinnerUpgrade dtb-alteraUpgrade kernel-64kb-extraUpgrade kernel-azure-extraUpgrade kselftests-kmp-azureUpgrade kernel-defaultUpgrade kernel-rt-extraUpgrade cluster-md-kmp-rtUpgrade dtb-caviumUpgrade dtb-nvidiaUpgrade kernel-64kb-optionalUpgrade kernel-64kb-develUpgrade gfs2-kmp-64kbUpgrade kernel-symsUpgrade dlm-kmp-azureUpgrade kernel-sourceUpgrade dlm-kmp-defaultUpgrade kernel-obs-qaUpgrade kernel-devel-azureUpgrade kernel-default-optionalUpgrade kernel-rt-livepatch-develUpgrade kselftests-kmp-defaultUpgrade kernel-macrosUpgrade kernel-develUpgrade kernel-64kbUpgrade dtb-hisiliconUpgrade dtb-amdUpgrade kernel-kvmsmallUpgrade kernel-default-extraUpgrade kernel-default-develUpgrade dtb-armUpgrade dtb-apmUpgrade kernel-syms-rtUpgrade kernel-docsUpgrade kernel-devel-rtUpgrade gfs2-kmp-rtUpgrade dtb-xilinxUpgrade cluster-md-kmp-azureUpgrade reiserfs-kmp-defaultUpgrade kselftests-kmp-rtUpgrade kernel-syms-azureUpgrade cluster-md-kmp-defaultUpgrade kernel-zfcpdumpUpgrade dtb-socionextUpgrade kernel-kvmsmall-develUpgrade dtb-mediatekUpgrade kernel-debug-develUpgrade kernel-rt-develUpgrade ocfs2-kmp-rtUpgrade kernel-rt_debug-vdsoUpgrade reiserfs-kmp-rtUpgrade kernel-debugUpgrade kernel-azure-vdsoUpgrade dtb-amlogicUpgrade dtb-amazonUpgrade reiserfs-kmp-azure | Dec 5, 2025 | Aug 18, 2025 |
| Ubuntu | — | Upgrade linux-image-xilinx-6.8Upgrade linux-image-oem-22.04cUpgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-awsUpgrade linux-image-nvidia-64kUpgrade linux-image-6.14.0-1007-raspiUpgrade linux-image-gke-64k-6.8Upgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-aws-fips-6.8Upgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-azureUpgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-aws-6.8Upgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-aws-lts-24.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-azure-fdeUpgrade linux-image-6.8.0-1046-awsUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-generic-64k-6.8Upgrade linux-image-azure-fips-6.8Upgrade linux-image-ibm-classicUpgrade linux-image-aws-64kUpgrade linux-image-6.14.0-1008-gcpUpgrade linux-image-azure-6.8Upgrade linux-image-ibm-6.8Upgrade linux-image-xilinxUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-6.8.0-100-fipsUpgrade linux-image-gcpUpgrade linux-image-azure-lts-24.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-azure-fipsUpgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-raspi-realtimeUpgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-6.8.0-100-genericUpgrade linux-image-oem-22.04bUpgrade linux-image-ibmUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-oracle-6.8Upgrade linux-image-oracle-64kUpgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-6.14.0-1007-aws-64kUpgrade linux-image-aws-64k-6.8Upgrade linux-image-gcp-6.8Upgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-raspi-6.8Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-gke-6.8Upgrade linux-image-generic-6.8Upgrade linux-image-realtimeUpgrade linux-image-fips-6.8Upgrade linux-image-6.14.0-1007-awsUpgrade linux-image-kvmUpgrade linux-image-6.14.0-22-genericUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-6.14.0-1007-azureUpgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-virtualUpgrade linux-image-realtime-6.8.1Upgrade linux-image-oem-22.04aUpgrade linux-image-lowlatency-6.8Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-6.8.0-1051-azureUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-6.14.0-1004-realtimeUpgrade linux-image-6.14.0-1008-gcp-64kUpgrade linux-image-6.8.0-1046-azureUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-oracleUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-gkeopUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-6.14.0-1007-oracleUpgrade linux-image-generic-lpaeUpgrade linux-image-generic-64kUpgrade linux-image-oem-22.04dUpgrade linux-image-nvidiaUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.14.0-22-generic-64kUpgrade linux-image-raspiUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-oem-22.04Upgrade linux-image-gke-64kUpgrade linux-image-gkeop-6.8Upgrade linux-image-gkeUpgrade linux-image-aws-fipsUpgrade linux-image-gcp-64kUpgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-6.14.0-1007-oracle-64kUpgrade linux-image-virtual-6.8Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-genericUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-fipsUpgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-lowlatencyUpgrade linux-image-intel-iotgUpgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-6.14.0-1007-azure-fdeUpgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-gcp-fipsUpgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-oracle-64k-lts-24.04 | Jun 26, 2025 | May 20, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 17, 2026 | May 20, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub