CVE catalog

CVE-2025-9231

OpenSSL vulnerabilities

Severity: Medium · CVSS 6.5CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L
Published: Sep 30, 2025, 12:00:00 AM UTC
Source: [NVD] · [CVE record]
EPSS: 2.24% · Oct 25, 2026

Issue summary: A timing side-channel which could potentially allow remote recovery of the private key exists in the SM2 algorithm implementation on 64 bit ARM platforms. Impact summary: A timing side-channel in SM2 signature computations on 64 bit ARM platforms could allow recovering the private key by an attacker.. While remote key recovery over a network was not attempted by the reporter, timing measurements revealed a timing signal which may allow such an attack. OpenSSL does not directly support certificates with SM2 keys in TLS, and so this CVE is not relevant in most TLS contexts. However, given that it is possible to add support for such certificates via a custom provider, coupled with the fact that in such a custom provider context the private key may be recoverable via remote timing measurements, we consider this to be a Moderate severity issue. The FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this issue, as SM2 is not an approved algorithm.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

Distribution	Package	Release	Version	Status
Debian	openssl	sid	`3.6.5-1`	fixed
Debian	openssl	forky	`3.6.5-1`	fixed
Debian	openssl	trixie	`3.5.7-1~deb13u2`	fixed
Debian	openssl	trixie-security	`3.5.7-1~deb13u3`	fixed
Debian	openssl	bookworm	`3.0.20-1~deb12u2`	not affected
Debian	openssl	bookworm-security	`3.0.22-1~deb12u2`	not affected
Ubuntu	openssl	noble	Not reported	not affected
Ubuntu	openssl	noble	`3.0.13-0ubuntu3.6`	fixed
Ubuntu	libssl-dev	noble	`3.0.13-0ubuntu3.6`	fixed
Ubuntu	libssl-doc	noble	`3.0.13-0ubuntu3.6`	fixed
Ubuntu	libssl3t64	noble	`3.0.13-0ubuntu3.6`	fixed
Alpine	openssl	3.20	`3.3.5-r0`	fixed
Alpine	openssl	3.21	`3.3.5-r0`	fixed
Alpine	openssl	3.22	`3.5.4-r0`	fixed
Alpine	openssl	3.23	`3.5.4-r0`	fixed
Alpine	openssl	3.24	`3.5.4-r0`	fixed
Ubuntu	nodejs	pro	`12.22.5~dfsg-5ubuntu1`	vulnerable
Ubuntu	nodejs	pro	`12.22.7~dfsg-2ubuntu1`	vulnerable
Ubuntu	nodejs	pro	`12.22.7~dfsg-2ubuntu3`	vulnerable
Ubuntu	nodejs	pro	`12.22.9~dfsg-1ubuntu2`	vulnerable
Ubuntu	nodejs	pro	`12.22.9~dfsg-1ubuntu3`	vulnerable
Ubuntu	nodejs	pro	`12.22.9~dfsg-1ubuntu3.1`	vulnerable
Ubuntu	nodejs	pro	`12.22.9~dfsg-1ubuntu3.2`	vulnerable
Ubuntu	nodejs	pro	`12.22.9~dfsg-1ubuntu3.3`	vulnerable
Ubuntu	nodejs	pro	`12.22.9~dfsg-1ubuntu3.4`	vulnerable
Ubuntu	nodejs	pro	`12.22.9~dfsg-1ubuntu3.5`	vulnerable
Ubuntu	nodejs	pro	`12.22.9~dfsg-1ubuntu3.6`	vulnerable
Ubuntu	nodejs	pro	`12.22.9~dfsg-1ubuntu3.6+esm2`	vulnerable
Ubuntu	openssl	25.10	`3.4.1-1ubuntu3`	vulnerable
Ubuntu	openssl	25.10	`3.5.0-2ubuntu1`	vulnerable
Ubuntu	openssl	25.10	`3.5.2-1ubuntu1`	vulnerable
Ubuntu	openssl	25.10	`3.5.3-1ubuntu2`	fixed
Ubuntu	openssl	26.04	`3.5.3-1ubuntu2`	fixed

Fixed-version evidence

Distribution	Package	Type	Release	Fixed version	Urgency	Origin	Bugs
Debian	openssl	source	sid	`3.5.4-1`	not yet assigned	Not reported	Not reported
Debian	openssl	source	forky	`3.5.4-1`	not yet assigned	Not reported	Not reported
Debian	openssl	source	trixie	`3.5.1-1+deb13u1`	not yet assigned	Not reported	Not reported
Debian	openssl	source	bookworm	`Not affected`	unimportant	Not reported	Not reported
Ubuntu	openssl	deb	noble	`3.0.13-0ubuntu3.6`	Not reported	Not reported	Not reported
Ubuntu	libssl-dev	deb	noble	`3.0.13-0ubuntu3.6`	Not reported	Not reported	Not reported
Ubuntu	libssl-doc	deb	noble	`3.0.13-0ubuntu3.6`	Not reported	Not reported	Not reported
Ubuntu	libssl3t64	deb	noble	`3.0.13-0ubuntu3.6`	Not reported	Not reported	Not reported
Alpine	openssl	apk	3.20	`3.3.5-r0`	Not reported	ALPINE-CVE-2025-9231	Not reported
Alpine	openssl	apk	3.21	`3.3.5-r0`	Not reported	ALPINE-CVE-2025-9231	Not reported
Alpine	openssl	apk	3.22	`3.5.4-r0`	Not reported	ALPINE-CVE-2025-9231	Not reported
Alpine	openssl	apk	3.23	`3.5.4-r0`	Not reported	ALPINE-CVE-2025-9231	Not reported
Alpine	openssl	apk	3.24	`3.5.4-r0`	Not reported	ALPINE-CVE-2025-9231	Not reported
Ubuntu	openssl	deb	25.10	`3.5.3-1ubuntu2`	Not reported	UBUNTU-CVE-2025-9231	Not reported
Ubuntu	openssl	deb	26.04	`3.5.3-1ubuntu2`	Not reported	UBUNTU-CVE-2025-9231	Not reported

OpenFactory catalog packages

[Debian 12 (Bookworm)]

[libssl3]Not affected
Source package: [openssl]
Details (6)
- 3.0.20-1~deb12u2 · amd64 · bookworm
  Not affected
  usn · openssl · debian · bookworm
- 3.0.20-1~deb12u2 · arm64 · bookworm
  Not affected
  usn · openssl · debian · bookworm
- 3.0.20-1~deb12u2 · amd64 · bookworm-security
  Not affected
  usn · openssl · debian · bookworm
- 3.0.20-1~deb12u2 · arm64 · bookworm-security
  Not affected
  usn · openssl · debian · bookworm
- 3.0.17-1~deb12u2 · amd64 · bookworm-updates
  Not affected
  usn · openssl · debian · bookworm
- 3.0.17-1~deb12u2 · arm64 · bookworm-updates
  Not affected
  usn · openssl · debian · bookworm
[libssl-dev]Not affected
Source package: [openssl]
Details (6)
- 3.0.20-1~deb12u2 · amd64 · bookworm
  Not affected
  usn · openssl · debian · bookworm
- 3.0.20-1~deb12u2 · arm64 · bookworm
  Not affected
  usn · openssl · debian · bookworm
- 3.0.20-1~deb12u2 · amd64 · bookworm-security
  Not affected
  usn · openssl · debian · bookworm
- 3.0.20-1~deb12u2 · arm64 · bookworm-security
  Not affected
  usn · openssl · debian · bookworm
- 3.0.17-1~deb12u2 · amd64 · bookworm-updates
  Not affected
  usn · openssl · debian · bookworm
- 3.0.17-1~deb12u2 · arm64 · bookworm-updates
  Not affected
  usn · openssl · debian · bookworm
[libssl-doc]Not affected
Source package: [openssl]
Details (6)
- 3.0.20-1~deb12u2 · all · bookworm
  Not affected
  usn · openssl · debian · bookworm
- 3.0.20-1~deb12u2 · all · bookworm
  Not affected
  usn · openssl · debian · bookworm
- 3.0.20-1~deb12u2 · all · bookworm-security
  Not affected
  usn · openssl · debian · bookworm
- 3.0.20-1~deb12u2 · all · bookworm-security
  Not affected
  usn · openssl · debian · bookworm
- 3.0.17-1~deb12u2 · all · bookworm-updates
  Not affected
  usn · openssl · debian · bookworm
- 3.0.17-1~deb12u2 · all · bookworm-updates
  Not affected
  usn · openssl · debian · bookworm
[openssl]Not affected
Details (6)
- 3.0.20-1~deb12u2 · amd64 · bookworm
  Not affected
  usn · openssl · debian · bookworm
- 3.0.20-1~deb12u2 · arm64 · bookworm
  Not affected
  usn · openssl · debian · bookworm
- 3.0.20-1~deb12u2 · amd64 · bookworm-security
  Not affected
  usn · openssl · debian · bookworm
- 3.0.20-1~deb12u2 · arm64 · bookworm-security
  Not affected
  usn · openssl · debian · bookworm
- 3.0.17-1~deb12u2 · amd64 · bookworm-updates
  Not affected
  usn · openssl · debian · bookworm
- 3.0.17-1~deb12u2 · arm64 · bookworm-updates
  Not affected
  usn · openssl · debian · bookworm

[Debian 13 (Trixie)]

[libssl3t64]Fixed
Source package: [openssl]
Details (6)
- 3.5.6-1~deb13u2 · amd64 · trixie
  Fixed · Fixed: 3.5.1-1+deb13u1
  usn · openssl · debian · 13
- 3.5.6-1~deb13u2 · arm64 · trixie
  Fixed · Fixed: 3.5.1-1+deb13u1
  usn · openssl · debian · 13
- 3.5.6-1~deb13u2 · amd64 · trixie-security · Historical version
  Fixed · Fixed: 3.5.1-1+deb13u1
  usn · openssl · debian · 13
- 3.5.7-1~deb13u2 · amd64 · trixie-security · Historical version
  Fixed · Fixed: 3.5.1-1+deb13u1
  usn · openssl · debian · 13
- 3.5.7-1~deb13u2 · arm64 · trixie-security
  Fixed · Fixed: 3.5.1-1+deb13u1
  usn · openssl · debian · 13
- 3.5.7-1~deb13u3 · amd64 · trixie-security
  Fixed · Fixed: 3.5.1-1+deb13u1
  usn · openssl · debian · 13
[libssl-dev]Fixed
Source package: [openssl]
Details (6)
- 3.5.6-1~deb13u2 · amd64 · trixie
  Fixed · Fixed: 3.5.1-1+deb13u1
  usn · openssl · debian · 13
- 3.5.6-1~deb13u2 · arm64 · trixie
  Fixed · Fixed: 3.5.1-1+deb13u1
  usn · openssl · debian · 13
- 3.5.6-1~deb13u2 · amd64 · trixie-security · Historical version
  Fixed · Fixed: 3.5.1-1+deb13u1
  usn · openssl · debian · 13
- 3.5.7-1~deb13u2 · amd64 · trixie-security · Historical version
  Fixed · Fixed: 3.5.1-1+deb13u1
  usn · openssl · debian · 13
- 3.5.7-1~deb13u2 · arm64 · trixie-security
  Fixed · Fixed: 3.5.1-1+deb13u1
  usn · openssl · debian · 13
- 3.5.7-1~deb13u3 · amd64 · trixie-security
  Fixed · Fixed: 3.5.1-1+deb13u1
  usn · openssl · debian · 13
[libssl-doc]Fixed
Source package: [openssl]
Details (6)
- 3.5.6-1~deb13u2 · all · trixie
  Fixed · Fixed: 3.5.1-1+deb13u1
  usn · openssl · debian · 13
- 3.5.6-1~deb13u2 · all · trixie
  Fixed · Fixed: 3.5.1-1+deb13u1
  usn · openssl · debian · 13
- 3.5.6-1~deb13u2 · all · trixie-security · Historical version
  Fixed · Fixed: 3.5.1-1+deb13u1
  usn · openssl · debian · 13
- 3.5.7-1~deb13u2 · all · trixie-security
  Fixed · Fixed: 3.5.1-1+deb13u1
  usn · openssl · debian · 13
- 3.5.7-1~deb13u2 · all · trixie-security · Historical version
  Fixed · Fixed: 3.5.1-1+deb13u1
  usn · openssl · debian · 13
- 3.5.7-1~deb13u3 · all · trixie-security
  Fixed · Fixed: 3.5.1-1+deb13u1
  usn · openssl · debian · 13
[openssl]Fixed
Details (6)
- 3.5.6-1~deb13u2 · amd64 · trixie
  Fixed · Fixed: 3.5.1-1+deb13u1
  usn · openssl · debian · 13
- 3.5.6-1~deb13u2 · arm64 · trixie
  Fixed · Fixed: 3.5.1-1+deb13u1
  usn · openssl · debian · 13
- 3.5.6-1~deb13u2 · amd64 · trixie-security · Historical version
  Fixed · Fixed: 3.5.1-1+deb13u1
  usn · openssl · debian · 13
- 3.5.7-1~deb13u2 · amd64 · trixie-security · Historical version
  Fixed · Fixed: 3.5.1-1+deb13u1
  usn · openssl · debian · 13
- 3.5.7-1~deb13u2 · arm64 · trixie-security
  Fixed · Fixed: 3.5.1-1+deb13u1
  usn · openssl · debian · 13
- 3.5.7-1~deb13u3 · amd64 · trixie-security
  Fixed · Fixed: 3.5.1-1+deb13u1
  usn · openssl · debian · 13
[openssl-provider-fips]Fixed
Source package: [openssl]
Details (6)
- 3.5.6-1~deb13u2 · amd64 · trixie
  Fixed · Fixed: 3.5.1-1+deb13u1
  usn · openssl · debian · 13
- 3.5.6-1~deb13u2 · arm64 · trixie
  Fixed · Fixed: 3.5.1-1+deb13u1
  usn · openssl · debian · 13
- 3.5.6-1~deb13u2 · amd64 · trixie-security · Historical version
  Fixed · Fixed: 3.5.1-1+deb13u1
  usn · openssl · debian · 13
- 3.5.7-1~deb13u2 · amd64 · trixie-security · Historical version
  Fixed · Fixed: 3.5.1-1+deb13u1
  usn · openssl · debian · 13
- 3.5.7-1~deb13u2 · arm64 · trixie-security
  Fixed · Fixed: 3.5.1-1+deb13u1
  usn · openssl · debian · 13
- 3.5.7-1~deb13u3 · amd64 · trixie-security
  Fixed · Fixed: 3.5.1-1+deb13u1
  usn · openssl · debian · 13
[openssl-provider-legacy]Fixed
Source package: [openssl]
Details (6)
- 3.5.6-1~deb13u2 · amd64 · trixie
  Fixed · Fixed: 3.5.1-1+deb13u1
  usn · openssl · debian · 13
- 3.5.6-1~deb13u2 · arm64 · trixie
  Fixed · Fixed: 3.5.1-1+deb13u1
  usn · openssl · debian · 13
- 3.5.6-1~deb13u2 · amd64 · trixie-security · Historical version
  Fixed · Fixed: 3.5.1-1+deb13u1
  usn · openssl · debian · 13
- 3.5.7-1~deb13u2 · amd64 · trixie-security · Historical version
  Fixed · Fixed: 3.5.1-1+deb13u1
  usn · openssl · debian · 13
- 3.5.7-1~deb13u2 · arm64 · trixie-security
  Fixed · Fixed: 3.5.1-1+deb13u1
  usn · openssl · debian · 13
- 3.5.7-1~deb13u3 · amd64 · trixie-security
  Fixed · Fixed: 3.5.1-1+deb13u1
  usn · openssl · debian · 13

Observed: Oct 27, 2026, 11:38:42 AM UTC

References

[CERT-Bund public advisories] · [CISA cybersecurity advisories] · [Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX] · [Ubuntu Security Notices (USN)]