CVE-2023-52616
kernel: crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
Severity
ModerateRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · March 18, 2024
Updated · August 5, 2026
Description
A vulnerability was found in the crypto: lib/mpi component of the Linux kernel, where the initialization of the mpi_ec_ctx structure caused crashes due to uncleared fields. This issue occurs when the structure is referenced after being released. It typically triggers during specific calculations, like the Za value for SM2.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-20 · Improper Input Validation