Skip to content
OpenAdvisories
Medium · 5.9 CVE-2025-9231 EUVD-2025-31728GHSA-9mrx-mqmg-gwj9

Timing side-channel in SM2 algorithm on 64 bit ARM

Published Sep 30, 2025 · Updated Nov 6, 2026 · Assigned by openssl

Vendor: OpenSSL Product: OpenSSL Package: nodejs Package: openssl Package: openssl Package: openssl Package: openssl Ecosystem: Alpine Ecosystem: Debian Ecosystem: Ubuntu Ecosystem: Wolfi

Description

Issue summary: A timing side-channel which could potentially allow remote
recovery of the private key exists in the SM2 algorithm implementation on 64 bit
ARM platforms.

Impact summary: A timing side-channel in SM2 signature computations on 64 bit
ARM platforms could allow recovering the private key by an attacker..

While remote key recovery over a network was not attempted by the reporter,
timing measurements revealed a timing signal which may allow such an attack.

OpenSSL does not directly support certificates with SM2 keys in TLS, and so
this CVE is not relevant in most TLS contexts. However, given that it is
possible to add support for such certificates via a custom provider, coupled
with the fact that in such a custom provider context the private key may be
recoverable via remote timing measurements, we consider this to be a Moderate
severity issue.

The FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this
issue, as SM2 is not an approved algorithm.

Affected products

VendorProductAffectedFixed
OpenSSL OpenSSL 3.5.0 – < 3.5.4, 3.4.0 – < 3.4.3, 3.3.0 – < 3.3.5, 3.2.0 – < 3.2.6 3.5.4

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗
ReleasePackageFixed inAdvisory
Debian 14 openssl 3.5.4-1 —
Debian 13 openssl 3.5.1-1+deb13u1 —

Ubuntu

Security tracker ↗
ReleasePackageFixed inAdvisory
Ubuntu 26.04 LTS openssl 3.5.3-1ubuntu2 —
Ubuntu 25.10 openssl 3.5.3-1ubuntu2 —
Ubuntu 24.04 LTS openssl 3.0.13-0ubuntu3.6 USN-7786-1
Ubuntu 22.04 LTS openssl 3.0.2-0ubuntu1.20 USN-7786-1
Show 5 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Ubuntu Pro 22.04 LTS nodejs No fix yet —
Ubuntu Pro 20.04 LTS openssl 1.1.1f-1ubuntu2.24+esm1 USN-7786-1
Ubuntu Pro 18.04 LTS nodejs No fix yet —
Ubuntu Pro 18.04 LTS openssl 1.1.1-1ubuntu2.1~18.04.23+esm6 USN-7786-1
Ubuntu Pro 18.04 LTS openssl1.0 1.0.2n-1ubuntu5.13+esm2 USN-7786-1
Ubuntu Pro 16.04 LTS nodejs No fix yet —
Ubuntu Pro 16.04 LTS openssl 1.0.2g-1ubuntu4.20+esm13 USN-7786-1
Ubuntu Pro 14.04 LTS openssl 1.0.1f-1ubuntu2.27+esm11 USN-7786-1

Red Hat

Security tracker ↗
ReleasePackageFixed inAdvisory
Red Hat Hardened Images 1 openssl +5 3.5.6-0.1.hum1 RHSA-2026:7261

SUSE

Security tracker ↗
ReleasePackageFixed inAdvisory
SLES 15 SP7 nodejs24 24.18.1-150700.15.18.1 SUSE-SU-2026:3835-1
SLES 15 SP7 openssl 3.5.0-150700.3.4.1 SUSE-SU-2026:3835-1
SLES 15 SP7 openssl-3 3.5.0-150700.5.45.2 SUSE-SU-2026:3835-1
Show 3 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
SLES for SAP 16.0 openssl-3 3.5.0-160000.4.1 SUSE-SU-2025:21213-1
SLES 16.0 openssl-3 3.5.0-160000.4.1 SUSE-SU-2025:21213-1
SLE Micro 6.2 openssl-3 3.5.0-160000.4.1 SUSE-SU-2025:21224-1

openSUSE

Security tracker ↗
ReleasePackageFixed inAdvisory
openSUSE Tumbleweed openssl-3 3.5.3-2.1 openSUSE-SU-2026:10237-1
openSUSE Tumbleweed regclient 0.10.0-1.1 openSUSE-SU-2025:15723-1
openSUSE Leap 16.0 openssl-3 3.5.0-160000.4.1 openSUSE-SU-2025:20164-1

Alpine

Security tracker ↗
ReleasePackageFixed inAdvisory
Alpine v3.24 openssl 3.5.4-r0 —
Alpine v3.23 openssl 3.5.4-r0 —
Alpine v3.22 openssl 3.5.4-r0 —
Alpine v3.21 openssl 3.3.5-r0 —
Alpine v3.20 openssl 3.3.5-r0 —

Amazon Linux

ReleasePackageFixed inAdvisory
Amazon Linux 2023 openssl +5 1:3.2.2-1.amzn2023.0.2 ALAS2023-2025-1225

Wolfi

ReleasePackageFixed inAdvisory
Wolfi rolling openssl 3.5.4-r0 —

Advisories 20

References