crypto: ecc - Fix carry overflow in vli multiplication
Published Jul 25, 2026
8.8
HIGHCVSS 3.1
EPSS 0.35%
Description
The carry flag calculation fails when r01.m_high is saturated (0xFFFFFFFFFFFFFFFF) and addition of lower bits overflows.
The condition (r01.m_high < product.m_high) doesn't handle the case where r01.m_high == product.m_high and an additional carry exists from lower-bit overflow.
When commit 3c4b23901a0c ("crypto: ecdh - Add ECDH software support") introduced crypto/ecc.c, it split the muladd() function in the micro-ecc library into separate mul_64_64() and add_128_128() helpers. It seems the check got lost in translation.
Add proper handling for this boundary by accounting for the carry from the lower addition.
Affected products
-
Affected
- ≥ , <
- ≥ , <
- ≥ , <
- ≥ , <
- ≥ , <
- ≥ , <
- ≥ , <
- ≥ , <
-
Affected
- 4.8
Unaffected
- ≥ 0, < 4.8
- ≥ 5.10.261, ≤ 5.10.*
- ≥ 5.15.212, ≤ 5.15.*
- ≥ 6.1.178, ≤ 6.1.*
- ≥ 6.12.96, ≤ 6.12.*
- ≥ 6.18.39, ≤ 6.18.*
- ≥ 6.6.145, ≤ 6.6.*
- ≥ 7.1.4, ≤ 7.1.*
- 7.2
Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).
| Vendor | Product | Default status | Versions |
|---|---|---|---|
| Linux | Linux | unaffected | Affected
|
| Linux | Linux | affected | Affected
Unaffected
|
- ≥ 4.8 · < 5.10.261
- ≥ 5.11 · < 5.15.212
- ≥ 5.16 · < 6.1.178
- ≥ 6.2 · < 6.6.145
- ≥ 6.7 · < 6.12.96
- ≥ 6.13 · < 6.18.39
- ≥ 6.19 · < 7.1.4
No data.
Red Hat Enterprise Linux 10
kernel
Fix deferred
Red Hat Enterprise Linux 6
kernel
Not affected
Red Hat Enterprise Linux 7
kernel
Not affected
Red Hat Enterprise Linux 7
kernel-rt
Not affected
Red Hat Enterprise Linux 8
kernel
Fix deferred
Red Hat Enterprise Linux 8
kernel-rt
Fix deferred
Red Hat Enterprise Linux 9
kernel
Fix deferred
Red Hat Enterprise Linux 9
kernel-rt
Fix deferred
| Product | Package | State | Advisory |
|---|---|---|---|
| Red Hat Enterprise Linux 10 | kernel | Fix deferred | n/a |
| Red Hat Enterprise Linux 6 | kernel | Not affected | n/a |
| Red Hat Enterprise Linux 7 | kernel | Not affected | n/a |
| Red Hat Enterprise Linux 7 | kernel-rt | Not affected | n/a |
| Red Hat Enterprise Linux 8 | kernel | Fix deferred | n/a |
| Red Hat Enterprise Linux 8 | kernel-rt | Fix deferred | n/a |
| Red Hat Enterprise Linux 9 | kernel | Fix deferred | n/a |
| Red Hat Enterprise Linux 9 | kernel-rt | Fix deferred | n/a |
No package ranges for this CVE.
Remediation
No remediation recorded yet.
References (14)
- https://access.redhat.com/security/cve/CVE-2026-64313 Vendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2507085 Issue Tracking
- https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-49025 Advisory
- https://git.kernel.org/stable/c/24a54dfa06d09813b4802a374fad3d2c0e16a884 Patch
- https://git.kernel.org/stable/c/27b536a2ec8e2f85a0380c2d13c9ecbc7aaab406 Patch
- https://git.kernel.org/stable/c/5275e0fca256d081e2e7d4ba3dd8216c6e50d44e Patch
- https://git.kernel.org/stable/c/677450e5ef850c4d28b7956aa01104548c2a894e Patch
- https://git.kernel.org/stable/c/774ddddf5eb26eeca177350413e3e2bc50930ee9 Patch
- https://git.kernel.org/stable/c/b709e0e768766abe29a49e1c1922a1604be602f4 Patch
- https://git.kernel.org/stable/c/d11b2bb99bec1f5557c01cac42231e23745f49b8 Patch
- https://git.kernel.org/stable/c/ebaae7c4251cc0cdb2602f334d4f08a3e82d271e Patch
- https://lore.kernel.org/linux-cve-announce/2026072509-CVE-2026-64313-1119@gregkh/T
- https://nvd.nist.gov/vuln/detail/CVE-2026-64313
- https://www.cve.org/CVERecord?id=CVE-2026-64313
Change history (0)
No recorded changes yet.
CVE.org / MITRE
CISA Vulnrichment
No data
GitHub
No data