Catalogo CVE

CVE-2026-54875

Issue summary: A non-constant-time optimized implementation of scalar point multiplication is used for SM2 private key operations on ARM64 and RISC-V platforms. Impact summary: An attacker able to me

[Catalogo CVE]

Gravità: High · CVSS 8.2CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H
Published: Sep 29, 2026, 4:17:07 PM UTC
Updated: Sep 29, 2026, 4:17:08 PM UTC
Source: [NVD] · [CVE record]
EPSS: 0.29% · Oct 22, 2026

Issue summary: A non-constant-time optimized implementation of scalar point multiplication is used for SM2 private key operations on ARM64 and RISC-V platforms. Impact summary: An attacker able to measure the time taken by, or to observe the cache-line access pattern of SM2 signing or decryption on an affected platform can learn information about the secret scalar. CWE: CWE-208: Observable Timing Discrepancy Description: On ARM64 and RISC-V processors, the SM2 curve uses an optimized scalar multiplication implementation whose conditional branches and table look ups are chosen according to the bits of the secret scalar. The execution time and the cache-access pattern therefore depend on the long-term private key (during SM2 decryption) or the per-signature nonce (during SM2 signature generation), forming a timing and cache side-channel. FIPS Impact: no SM2 is not a FIPS algorithm and the optimized SM2 implementation is not part of the FIPS module. OpenSSL 4.0, 3.6, 3.5 and 3.4 are vulnerable to this issue on AArch64 and RISC-V. OpenSSL 3.0, 1.1.1 and 1.0.2 are not affected by this issue. OpenSSL 4.0 users should upgrade to OpenSSL 4.0.3. OpenSSL 3.6 users should upgrade to OpenSSL 3.6.5. OpenSSL 3.5 users should upgrade to OpenSSL 3.5.9. OpenSSL 3.4 users should upgrade to OpenSSL 3.4.8. This issue was reported on 2 May 2026 by Abhinav Agarwal. It was independently reported on 6 June 2026 by Feng Xue. The fix was developed by Igor Ustinov. -- cut (non-publishing metadata for internal use) -- Reported by: Abhinav Agarwal, Feng Xue Fixed by: Igor Ustinov

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

Distribution	Package	Release	Version	Status
Debian	openssl	sid	`3.6.5-1`	fixed
Debian	openssl	forky	`3.6.5-1`	fixed
Debian	openssl	trixie	`3.5.7-1~deb13u2`	vulnerable
Debian	openssl	trixie-security	`3.5.7-1~deb13u3`	fixed
Debian	openssl	bookworm	`3.0.20-1~deb12u2`	not affected
Debian	openssl	bookworm-security	`3.0.22-1~deb12u1`	not affected
Ubuntu	openssl	noble	`3.0.13-0ubuntu3.16`	fixed
Ubuntu	libssl-dev	noble	`3.0.13-0ubuntu3.16`	fixed
Ubuntu	libssl-doc	noble	`3.0.13-0ubuntu3.16`	fixed
Ubuntu	libssl3t64	noble	`3.0.13-0ubuntu3.16`	fixed
Cpe	openssl	Not reported	`4.0.3`	fixed
Alpine	openssl	3.21	`3.3.7-r2`	fixed

Fixed-version evidence

Distribution	Package	Type	Release	Fixed version	Urgency	Origin	Bugs
Debian	openssl	source	sid	`3.6.5-1`	not yet assigned	Not reported	Not reported
Debian	openssl	source	forky	`3.6.5-1`	not yet assigned	Not reported	Not reported
Debian	openssl	source	trixie	`3.5.7-1~deb13u3`	not yet assigned	Not reported	Not reported
Debian	openssl	source	bookworm	`Not affected`	unimportant	Not reported	Not reported
Ubuntu	openssl	deb	noble	`3.0.13-0ubuntu3.16`	Not reported	Not reported	Not reported
Ubuntu	libssl-dev	deb	noble	`3.0.13-0ubuntu3.16`	Not reported	Not reported	Not reported
Ubuntu	libssl-doc	deb	noble	`3.0.13-0ubuntu3.16`	Not reported	Not reported	Not reported
Ubuntu	libssl3t64	deb	noble	`3.0.13-0ubuntu3.16`	Not reported	Not reported	Not reported
Cpe	openssl	cpe	Not reported	`4.0.3`	Not reported	NVD-CVE-2026-54875	Not reported
Alpine	openssl	apk	3.21	`3.3.7-r2`	Not reported	ALPINE-CVE-2026-54875	Not reported

OpenFactory catalog packages

[Debian 13 (Trixie)]

[libssl3t64]Interessata
Pacchetto sorgente: [openssl]
Dettagli (6)
- 3.5.6-1~deb13u2 · amd64 · trixie
  Interessata · Corretta: 3.5.7-1~deb13u3
  nvd · openssl · debian · 13
- 3.5.6-1~deb13u2 · arm64 · trixie
  Interessata · Corretta: 3.5.7-1~deb13u3
  nvd · openssl · debian · 13
- 3.5.6-1~deb13u2 · amd64 · trixie-security · Historical version
  Interessata · Corretta: 3.5.7-1~deb13u3
  nvd · openssl · debian · 13
- 3.5.7-1~deb13u2 · amd64 · trixie-security · Historical version
  Interessata · Corretta: 3.5.7-1~deb13u3
  nvd · openssl · debian · 13
- 3.5.7-1~deb13u2 · arm64 · trixie-security
  Interessata · Corretta: 3.5.7-1~deb13u3
  nvd · openssl · debian · 13
- 3.5.7-1~deb13u3 · amd64 · trixie-security
  Corretta · Corretta: 3.5.7-1~deb13u3
  nvd · openssl · debian · 13
[libssl-dev]Interessata
Pacchetto sorgente: [openssl]
Dettagli (6)
- 3.5.6-1~deb13u2 · amd64 · trixie
  Interessata · Corretta: 3.5.7-1~deb13u3
  nvd · openssl · debian · 13
- 3.5.6-1~deb13u2 · arm64 · trixie
  Interessata · Corretta: 3.5.7-1~deb13u3
  nvd · openssl · debian · 13
- 3.5.6-1~deb13u2 · amd64 · trixie-security · Historical version
  Interessata · Corretta: 3.5.7-1~deb13u3
  nvd · openssl · debian · 13
- 3.5.7-1~deb13u2 · amd64 · trixie-security · Historical version
  Interessata · Corretta: 3.5.7-1~deb13u3
  nvd · openssl · debian · 13
- 3.5.7-1~deb13u2 · arm64 · trixie-security
  Interessata · Corretta: 3.5.7-1~deb13u3
  nvd · openssl · debian · 13
- 3.5.7-1~deb13u3 · amd64 · trixie-security
  Corretta · Corretta: 3.5.7-1~deb13u3
  nvd · openssl · debian · 13
[libssl-doc]Interessata
Pacchetto sorgente: [openssl]
Dettagli (6)
- 3.5.6-1~deb13u2 · all · trixie
  Interessata · Corretta: 3.5.7-1~deb13u3
  nvd · openssl · debian · 13
- 3.5.6-1~deb13u2 · all · trixie
  Interessata · Corretta: 3.5.7-1~deb13u3
  nvd · openssl · debian · 13
- 3.5.6-1~deb13u2 · all · trixie-security · Historical version
  Interessata · Corretta: 3.5.7-1~deb13u3
  nvd · openssl · debian · 13
- 3.5.7-1~deb13u2 · all · trixie-security · Historical version
  Interessata · Corretta: 3.5.7-1~deb13u3
  nvd · openssl · debian · 13
- 3.5.7-1~deb13u2 · all · trixie-security
  Interessata · Corretta: 3.5.7-1~deb13u3
  nvd · openssl · debian · 13
- 3.5.7-1~deb13u3 · all · trixie-security
  Corretta · Corretta: 3.5.7-1~deb13u3
  nvd · openssl · debian · 13
[openssl]Interessata
Dettagli (6)
- 3.5.6-1~deb13u2 · amd64 · trixie
  Interessata · Corretta: 3.5.7-1~deb13u3
  nvd · openssl · debian · 13
- 3.5.6-1~deb13u2 · arm64 · trixie
  Interessata · Corretta: 3.5.7-1~deb13u3
  nvd · openssl · debian · 13
- 3.5.6-1~deb13u2 · amd64 · trixie-security · Historical version
  Interessata · Corretta: 3.5.7-1~deb13u3
  nvd · openssl · debian · 13
- 3.5.7-1~deb13u2 · amd64 · trixie-security · Historical version
  Interessata · Corretta: 3.5.7-1~deb13u3
  nvd · openssl · debian · 13
- 3.5.7-1~deb13u2 · arm64 · trixie-security
  Interessata · Corretta: 3.5.7-1~deb13u3
  nvd · openssl · debian · 13
- 3.5.7-1~deb13u3 · amd64 · trixie-security
  Corretta · Corretta: 3.5.7-1~deb13u3
  nvd · openssl · debian · 13
[openssl-provider-fips]Interessata
Pacchetto sorgente: [openssl]
Dettagli (6)
- 3.5.6-1~deb13u2 · amd64 · trixie
  Interessata · Corretta: 3.5.7-1~deb13u3
  nvd · openssl · debian · 13
- 3.5.6-1~deb13u2 · arm64 · trixie
  Interessata · Corretta: 3.5.7-1~deb13u3
  nvd · openssl · debian · 13
- 3.5.6-1~deb13u2 · amd64 · trixie-security · Historical version
  Interessata · Corretta: 3.5.7-1~deb13u3
  nvd · openssl · debian · 13
- 3.5.7-1~deb13u2 · amd64 · trixie-security · Historical version
  Interessata · Corretta: 3.5.7-1~deb13u3
  nvd · openssl · debian · 13
- 3.5.7-1~deb13u2 · arm64 · trixie-security
  Interessata · Corretta: 3.5.7-1~deb13u3
  nvd · openssl · debian · 13
- 3.5.7-1~deb13u3 · amd64 · trixie-security
  Corretta · Corretta: 3.5.7-1~deb13u3
  nvd · openssl · debian · 13
[openssl-provider-legacy]Interessata
Pacchetto sorgente: [openssl]
Dettagli (6)
- 3.5.6-1~deb13u2 · amd64 · trixie
  Interessata · Corretta: 3.5.7-1~deb13u3
  nvd · openssl · debian · 13
- 3.5.6-1~deb13u2 · arm64 · trixie
  Interessata · Corretta: 3.5.7-1~deb13u3
  nvd · openssl · debian · 13
- 3.5.6-1~deb13u2 · amd64 · trixie-security · Historical version
  Interessata · Corretta: 3.5.7-1~deb13u3
  nvd · openssl · debian · 13
- 3.5.7-1~deb13u2 · amd64 · trixie-security · Historical version
  Interessata · Corretta: 3.5.7-1~deb13u3
  nvd · openssl · debian · 13
- 3.5.7-1~deb13u2 · arm64 · trixie-security
  Interessata · Corretta: 3.5.7-1~deb13u3
  nvd · openssl · debian · 13
- 3.5.7-1~deb13u3 · amd64 · trixie-security
  Corretta · Corretta: 3.5.7-1~deb13u3
  nvd · openssl · debian · 13

[Debian 12 (Bookworm)]

[libssl3]Non interessata
Pacchetto sorgente: [openssl]
Dettagli (6)
- 3.0.20-1~deb12u2 · amd64 · bookworm
  Non interessata
  nvd · openssl · debian · bookworm
- 3.0.20-1~deb12u2 · arm64 · bookworm
  Non interessata
  nvd · openssl · debian · bookworm
- 3.0.20-1~deb12u2 · amd64 · bookworm-security
  Non interessata
  nvd · openssl · debian · bookworm
- 3.0.20-1~deb12u2 · arm64 · bookworm-security
  Non interessata
  nvd · openssl · debian · bookworm
- 3.0.17-1~deb12u2 · amd64 · bookworm-updates
  Non interessata
  nvd · openssl · debian · bookworm
- 3.0.17-1~deb12u2 · arm64 · bookworm-updates
  Non interessata
  nvd · openssl · debian · bookworm
[libssl-dev]Non interessata
Pacchetto sorgente: [openssl]
Dettagli (6)
- 3.0.20-1~deb12u2 · amd64 · bookworm
  Non interessata
  nvd · openssl · debian · bookworm
- 3.0.20-1~deb12u2 · arm64 · bookworm
  Non interessata
  nvd · openssl · debian · bookworm
- 3.0.20-1~deb12u2 · amd64 · bookworm-security
  Non interessata
  nvd · openssl · debian · bookworm
- 3.0.20-1~deb12u2 · arm64 · bookworm-security
  Non interessata
  nvd · openssl · debian · bookworm
- 3.0.17-1~deb12u2 · amd64 · bookworm-updates
  Non interessata
  nvd · openssl · debian · bookworm
- 3.0.17-1~deb12u2 · arm64 · bookworm-updates
  Non interessata
  nvd · openssl · debian · bookworm
[libssl-doc]Non interessata
Pacchetto sorgente: [openssl]
Dettagli (6)
- 3.0.20-1~deb12u2 · all · bookworm
  Non interessata
  nvd · openssl · debian · bookworm
- 3.0.20-1~deb12u2 · all · bookworm
  Non interessata
  nvd · openssl · debian · bookworm
- 3.0.20-1~deb12u2 · all · bookworm-security
  Non interessata
  nvd · openssl · debian · bookworm
- 3.0.20-1~deb12u2 · all · bookworm-security
  Non interessata
  nvd · openssl · debian · bookworm
- 3.0.17-1~deb12u2 · all · bookworm-updates
  Non interessata
  nvd · openssl · debian · bookworm
- 3.0.17-1~deb12u2 · all · bookworm-updates
  Non interessata
  nvd · openssl · debian · bookworm
[openssl]Non interessata
Dettagli (6)
- 3.0.20-1~deb12u2 · amd64 · bookworm
  Non interessata
  nvd · openssl · debian · bookworm
- 3.0.20-1~deb12u2 · arm64 · bookworm
  Non interessata
  nvd · openssl · debian · bookworm
- 3.0.20-1~deb12u2 · amd64 · bookworm-security
  Non interessata
  nvd · openssl · debian · bookworm
- 3.0.20-1~deb12u2 · arm64 · bookworm-security
  Non interessata
  nvd · openssl · debian · bookworm
- 3.0.17-1~deb12u2 · amd64 · bookworm-updates
  Non interessata
  nvd · openssl · debian · bookworm
- 3.0.17-1~deb12u2 · arm64 · bookworm-updates
  Non interessata
  nvd · openssl · debian · bookworm

Osservato: Oct 24, 2026, 2:46:55 AM UTC

Riferimenti

[CERT-Bund public advisories] · [Debian Security Tracker] · [FIRST EPSS] · [National Vulnerability Database (NVD)] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX] · [Ubuntu Security Notices (USN)]