Description
Issue summary: The POLY1305 MAC (message authentication code) implementation
contains a bug that might corrupt the internal state of applications running
on PowerPC CPU based platforms if the CPU provides vector instructions.
Impact summary: If an attacker can influence whether the POLY1305 MAC
algorithm is used, the application state might be corrupted with various
application dependent consequences.
The POLY1305 MAC (message authentication code) implementation in OpenSSL for
PowerPC CPUs restores the contents of vector registers in a different order
than they are saved. Thus the contents of some of these vector registers
are corrupted when returning to the caller. The vulnerable code is used only
on newer PowerPC processors supporting the PowerISA 2.07 instructions.
The consequences of this kind of internal application state corruption can
be various - from no consequences, if the calling application does not
depend on the contents of non-volatile XMM registers at all, to the worst
consequences, where the attacker could get complete control of the application
process. However unless the compiler uses the vector registers for storing
pointers, the most likely consequence, if any, would be an incorrect result
of some application dependent calculations or a crash leading to a denial of
service.
The POLY1305 MAC algorithm is most frequently used as part of the
CHACHA20-POLY1305 AEAD (authenticated encryption with associated data)
algorithm. The most common usage of this AEAD cipher is with TLS protocol
versions 1.2 and 1.3. If this cipher is enabled on the server a malicious
client can influence whether this AEAD cipher is used. This implies that
TLS server applications using OpenSSL can be potentially impacted. However
we are currently not aware of any concrete application that would be affected
by this issue therefore we consider this a Low severity security issue.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| OpenSSL | OpenSSL | 3.2.0 – < 3.2.1, 3.1.0 – < 3.1.5, 3.0.0 – < 3.0.13 | 3.2.1 |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | openssl | 3.1.5-1 | — |
| Debian 13 | openssl | 3.1.5-1 | — |
| Debian 12 | openssl | 3.0.13-1~deb12u1 | — |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 24.04 LTS | openssl | 3.0.10-1ubuntu4 | — |
| Ubuntu 22.04 LTS | openssl | 3.0.2-0ubuntu1.14 | USN-6622-1 |
| Ubuntu 20.04 LTS | openssl | 1.1.1f-1ubuntu2.21 | USN-6622-1 |
Show 3 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu Pro FIPS-updates 22.04 LTS | openssl | 3.0.2-0ubuntu1.14+Fips1 | — |
| Ubuntu Pro FIPS-preview 22.04 LTS | openssl | No fix yet | — |
| Ubuntu Pro 22.04 LTS | nodejs | No fix yet | — |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 9 | edk2 +4 | 20240524-6.el9_5 | RHSA-2024:9088 |
| RHEL 9 | openssl +3 | 1:3.0.7-27.el9 | RHSA-2024:2447 |
AlmaLinux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux 9 | edk2-ovmf +3 | 20240524-6.el9_5 | ALSA-2024:9088 |
| AlmaLinux 9 | openssl +3 | 1:3.0.7-27.el9 | ALSA-2024:2447 |
Rocky Linux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Rocky Linux 9 | edk2 | 20240524-6.el9_5.3 | RLSA-2024:9088 |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 15 SP5 | openssl-3 | 3.0.8-150500.5.24.1 | SUSE-SU-2024:0172-1 |
| SLES 15 SP4 | openssl-3 | 3.0.8-150400.4.49.1 | SUSE-SU-2024:0518-1 |
Show 6 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES for SAP 15 SP4 | openssl-3 | 3.0.8-150400.4.49.1 | SUSE-SU-2024:0518-1 |
| SLE Micro 5.4 | openssl-3 | 3.0.8-150400.4.49.1 | SUSE-SU-2024:0518-1 |
| SLE Micro 5.3 | openssl-3 | 3.0.8-150400.4.49.1 | SUSE-SU-2024:0518-1 |
| SLE HPC 15 SP4 | openssl-3 | 3.0.8-150400.4.49.1 | SUSE-SU-2024:0518-1 |
| SUSE Manager Server 4.3 | openssl-3 | 3.0.8-150400.4.49.1 | SUSE-SU-2024:0518-1 |
| SUSE Manager Proxy 4.3 | openssl-3 | 3.0.8-150400.4.49.1 | SUSE-SU-2024:0518-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | openssl-3 | 3.1.4-3.1 | openSUSE-SU-2024:13633-1 |
| openSUSE Leap 15.5 | openssl-3 | 3.0.8-150500.5.24.1 | SUSE-SU-2024:0172-1 |
Show 2 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Leap Micro 5.4 | openssl-3 | 3.0.8-150400.4.49.1 | SUSE-SU-2024:0518-1 |
| openSUSE Leap Micro 5.3 | openssl-3 | 3.0.8-150400.4.49.1 | SUSE-SU-2024:0518-1 |
Alpine
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Alpine v3.24 | openssl | 3.1.4-r3 | — |
| Alpine v3.23 | openssl | 3.1.4-r3 | — |
| Alpine v3.22 | openssl | 3.1.4-r3 | — |
| Alpine v3.21 | openssl | 3.1.4-r3 | — |
| Alpine v3.20 | openssl | 3.1.4-r3 | — |
Show 3 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Alpine v3.19 | openssl | 3.1.4-r3 | — |
| Alpine v3.18 | openssl | 3.1.4-r3 | — |
| Alpine v3.17 | openssl | 3.0.12-r2 | — |
Azure Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Azure Linux 3 | cloud-hypervisor-cvm | 38.0.72.2-1 | — |
| Azure Linux 3 | nodejs | 20.14.0-1 | — |
| Azure Linux 3 | openssl | 3.3.0-1 | — |
| Azure Linux 3 | openssl-fips-provider | No fix yet | — |
| Azure Linux 2 (CBL-Mariner) | cloud-hypervisor-cvm | 38.0.72.2-1 | — |
| Azure Linux 2 (CBL-Mariner) | hvloader | 1.0.1-6 | — |
Oracle Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Oracle Linux 9 | edk2-ovmf +3 | 20240524-6.0.1.el9_5 | ELSA-2024-9088 |
| Oracle Linux 9 | openssl +3 | 1:3.0.7-27.0.3.el9 | ELSA-2024-2447 |
| Oracle Linux 9 | openssl-fips-provider | 3.0.7-2.0.1.el9 | ELSA-2024-2447 |
Wolfi
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Wolfi rolling | openssl +1 | 3.2.1-r0 | — |
Advisories 38
- ALSA-2024:9088 Moderate: edk2 security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2024:2447 Low: openssl and openssl-fips-provider security update AlmaLinux Security Advisories · Oct 29, 2026
- RHSA-2024:2447 Red Hat Security Advisory: openssl and openssl-fips-provider security update Red Hat Security Advisories (RHSA) · Oct 15, 2026
- SSA-265688 SSA-265688: Vulnerabilities in the additional GNU/Linux subsystem of the SIMATIC S7-1500 TM MFP V1.1 Siemens ProductCERT · Oct 13, 2026
- WID-SEC-2025-0168 Oracle JD Edwards: Mehrere Schwachstellen BSI CERT-Bund (WID) · Oct 11, 2026
- RHSA-2024:9088 Red Hat Security Advisory: edk2 security update Red Hat Security Advisories (RHSA) · Aug 9, 2026
- WID-SEC-2024-1637 Oracle Fusion Middleware: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jun 1, 2026
- ICSA-24-102-01 Siemens SIMATIC S7-1500 TM MFP CISA ICS & IT advisories · May 14, 2026
- WID-SEC-2024-1226 Red Hat OpenShift: Mehrere Schwachstellen BSI CERT-Bund (WID) · May 11, 2026
- USN-6622-1 openssl vulnerabilities Ubuntu Security Notices (USN) · Apr 27, 2026
- RLSA-2024:9088 Moderate: edk2 security update Rocky Linux Security Advisories · Feb 4, 2026
- openSUSE-SU-2024:13633-1 libopenssl-3-devel-3.1.4-3.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2024:0172-1 Security update for openssl-3 SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2024:0518-1 Security update for openssl-3 SUSE / openSUSE Security Updates · Feb 4, 2026
- WID-SEC-2024-0894 Oracle MySQL: Mehrere Schwachstellen BSI CERT-Bund (WID) · Oct 27, 2025
- WID-SEC-2024-1656 Oracle MySQL: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jun 10, 2025
- ICSA-25-044-09 Siemens SCALANCE W700 IEEE 802.11ax CISA ICS & IT advisories · May 6, 2025
- WID-SEC-2024-0034 OpenSSL: Schwachstelle ermöglicht nicht spezifizierten Angriff BSI CERT-Bund (WID) · Apr 21, 2025
- NCSC-2025-0061 Kwetsbaarheden verholpen in Siemens producten NCSC-NL (Netherlands) · Feb 14, 2025
- NCSC-2025-0051 Kwetsbaarheden verholpen in Siemens producten NCSC-NL (Netherlands) · Feb 11, 2025
- SSA-769027 SSA-769027: Multiple Vulnerabilities fixed in SCALANCE W700 IEEE 802.11ax devices before V3.0.0 Siemens ProductCERT · Feb 11, 2025
- WID-SEC-2024-1307 Red Hat OpenShift Service Mesh Containers: Mehrere Schwachstellen BSI CERT-Bund (WID) · Feb 5, 2025
- NCSC-2025-0026 Kwetsbaarheden verholpen in Oracle JD Edwards NCSC-NL (Netherlands) · Jan 22, 2025
- ELSA-2024-9088 Moderate: edk2 security update (Oracle Linux 9) Oracle Linux Security Advisories (ELSA) · Nov 14, 2024
- NCSC-2024-0433 Kwetsbaarheden verholpen in Siemens producten NCSC-NL (Netherlands) · Nov 12, 2024
- SSA-331112 SSA-331112: Multiple Vulnerabilities in SINEC NMS Before V3.0 SP1 Siemens ProductCERT · Nov 12, 2024
- SSA-915275 SSA-915275: Multiple Vulnerabilities in SINEC INS Before V1.0 SP2 Update 3 Siemens ProductCERT · Nov 12, 2024
- ICSA-24-319-08 Siemens SINEC INS CISA ICS & IT advisories · Nov 12, 2024
- ICSA-24-319-04 Siemens SINEC NMS CISA ICS & IT advisories · Nov 12, 2024
- WID-SEC-2024-0769 IBM Rational Build Forge: Mehrere Schwachstellen BSI CERT-Bund (WID) · Nov 7, 2024
- NCSC-2024-0303 Kwetsbaarheden verholpen in Oracle MySQL NCSC-NL (Netherlands) · Jul 17, 2024
- NCSC-2024-0302 Kwetsbaarheden verholpen in Oracle JD Edwards NCSC-NL (Netherlands) · Jul 17, 2024
- NCSC-2024-0298 Kwetsbaarheden verholpen in Oracle Fusion Middleware NCSC-NL (Netherlands) · Jul 17, 2024
- NCSC-2024-0297 Kwetsbaarheden verholpen in Oracle Financial Services Applications NCSC-NL (Netherlands) · Jul 17, 2024
- WID-SEC-2024-1657 Oracle JD Edwards: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jul 16, 2024
- WID-SEC-2024-1638 Oracle Financial Services Applications: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jul 16, 2024
- WID-SEC-2024-1488 IBM InfoSphere Information Server: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jun 30, 2024
- ELSA-2024-2447 Low: openssl and openssl-fips-provider security update (Oracle Linux 9) Oracle Linux Security Advisories (ELSA) · May 3, 2024
References
- OpenSSL Advisory vendor-advisory
- 3.2.1 git commit patch
- 3.1.5 git commit patch
- 3.0.13 git commit patch