https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 29 Sep 2026 20:39:22 +0000 https://vulnerability.circl.lu/vuln/cve-2026-64313 <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>crypto: ecc - Fix carry overflow in vli multiplication</p> <p>The carry flag calculation fails when r01.m_high is saturated (0xFFFFFFFFFFFFFFFF) and addition of lower bits overflows.</p> <p>The condition (r01.m_high &lt; product.m_high) doesn&#39;t handle the case where r01.m_high == product.m_high and an additional carry exists from lower-bit overflow.</p> <p>When commit 3c4b23901a0c (&#34;crypto: ecdh - Add ECDH software support&#34;) introduced crypto/ecc.c, it split the muladd() function in the micro-ecc library into separate mul_64_64() and add_128_128() helpers. It seems the check got lost in translation.</p> <p>Add proper handling for this boundary by accounting for the carry from the lower addition.</p> <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>crypto: ecc - Fix carry overflow in vli multiplication</p> <p>The carry flag calculation fails when r01.m_high is saturated (0xFFFFFFFFFFFFFFFF) and addition of lower bits overflows.</p> <p>The condition (r01.m_high &lt; product.m_high) doesn&#39;t handle the case where r01.m_high == product.m_high and an additional carry exists from lower-bit overflow.</p> <p>When commit 3c4b23901a0c (&#34;crypto: ecdh - Add ECDH software support&#34;) introduced crypto/ecc.c, it split the muladd() function in the micro-ecc library into separate mul_64_64() and add_128_128() helpers. It seems the check got lost in translation.</p> <p>Add proper handling for this boundary by accounting for the carry from the lower addition.</p> https://vulnerability.circl.lu/vuln/cve-2026-64313