Description
Issue summary: SM2 signature generation uses non-constant-time arithmetic
on secret values, forming a timing side-channel.
Impact summary: An attacker able to measure SM2 signing times may learn
information about the per-signature secret nonce, which over many signatures
can, via a lattice / Hidden Number Problem attack, lead to recovery of the
private key.
CWE: CWE-208: Observable Timing Discrepancy
Description: SM2 signature generation computes the signature value using
variable-time BIGNUM operations on the secret nonce and the private key, so
the time taken to produce an SM2 signature depends on these secret values,
forming a timing side-channel.
Applications performing SM2 signature generation are affected on all
platforms.
FIPS Impact: no
SM2 is not a FIPS algorithm.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| OpenSSL | OpenSSL | 4.0.0 – < 4.0.3, 3.6.0 – < 3.6.5, 3.5.0 – < 3.5.9, 3.4.0 – < 3.4.8, 3.0.0 – < 3.0.23, 1.1.1 – < 1.1.1zj | 4.0.3 |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | openssl | 3.6.5-1 | — |
| Debian 13 | openssl | 3.5.7-1~deb13u3 | — |
| Debian 12 | openssl | 3.0.22-1~deb12u2 | — |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 26.10 | edk2 +1 | No fix yet | — |
| Ubuntu 26.04 LTS | edk2 +1 | No fix yet | — |
| Ubuntu 26.04 LTS | openssl | 3.5.5-1ubuntu3.6 | USN-8847-1 |
| Ubuntu 24.04 LTS | edk2 | No fix yet | — |
| Ubuntu 24.04 LTS | openssl | 3.0.13-0ubuntu3.16 | USN-8847-1 |
| Ubuntu 22.04 LTS | edk2 | No fix yet | — |
| Ubuntu 22.04 LTS | openssl | 3.0.2-0ubuntu1.30 | USN-8847-1 |
Show 14 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu Pro FIPS 20.04 LTS | openssl | No fix yet | — |
| Ubuntu Pro FIPS 18.04 LTS | openssl | No fix yet | — |
| Ubuntu Pro FIPS 16.04 LTS | openssl | No fix yet | — |
| Ubuntu Pro FIPS-updates 24.04 LTS | openssl-fips | No fix yet | — |
| Ubuntu Pro FIPS-updates 22.04 LTS | openssl +1 | No fix yet | — |
| Ubuntu Pro FIPS-updates 20.04 LTS | openssl | No fix yet | — |
| Ubuntu Pro FIPS-updates 18.04 LTS | openssl | No fix yet | — |
| Ubuntu Pro FIPS-updates 16.04 LTS | openssl | No fix yet | — |
| Ubuntu Pro FIPS-preview 22.04 LTS | openssl +1 | No fix yet | — |
| Ubuntu Pro 22.04 LTS | nodejs | No fix yet | — |
| Ubuntu Pro 20.04 LTS | edk2 | No fix yet | — |
| Ubuntu Pro 20.04 LTS | openssl | 1.1.1f-1ubuntu2.24+esm6 | USN-8847-2 |
| Ubuntu Pro 18.04 LTS | edk2 +1 | No fix yet | — |
| Ubuntu Pro 18.04 LTS | openssl | 1.1.1-1ubuntu2.1~18.04.23+esm11 | USN-8847-2 |
| Ubuntu Pro 18.04 LTS | openssl1.0 | 1.0.2n-1ubuntu5.13+esm7 | USN-8847-2 |
| Ubuntu Pro 16.04 LTS | edk2 +1 | No fix yet | — |
| Ubuntu Pro 16.04 LTS | openssl | 1.0.2g-1ubuntu4.20+esm19 | USN-8847-2 |
| Ubuntu Pro 14.04 LTS | openssl | 1.0.1f-1ubuntu2.27+esm17 | USN-8847-2 |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Red Hat Hardened Images 1 | openssl +10 | 3.5.9-0.1.hum1 | RHSA-2026:74166, RHSA-2026:74162 |
Rocky Linux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Rocky Linux 10 | openssl +3 | 1:3.5.9-1.el10_3 | RLSA-2026:98588 |
| Rocky Linux 9 | openssl +3 | 1:3.5.9-1.el9_9 | RLSA-2026:98484 |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 15 SP7 | openssl-1_1 | 1.1.1w-150700.11.35.1 | SUSE-SU-2026:5172-1 |
| SLES 15 SP7 | openssl-3 | 3.5.0-150700.5.53.2 | SUSE-SU-2026:4414-1 |
| SLES 15 SP6 | openssl-1_1 | 1.1.1w-150600.5.43.1 | SUSE-SU-2026:5206-1 |
| SLES 15 SP6 | openssl-3 | 3.1.4-150600.5.67.1 | SUSE-SU-2026:4419-1 |
| SLES 15 SP5 | openssl-1_1 | 1.1.1l-150500.17.68.1 | SUSE-SU-2026:5197-1 |
| SLES 15 SP5 | openssl-3 | 3.0.8-150500.5.80.1 | SUSE-SU-2026:4412-1 |
| SLES 15 SP4 | openssl-1_1 | 1.1.1l-150400.7.107.1 | SUSE-SU-2026:5205-1 |
| SLES 15 SP4 | openssl-3 | 3.0.8-150400.4.101.1 | SUSE-SU-2026:4413-1 |
| SLES 12 SP5 | openssl-1_1 | 1.1.1d-2.142.1 | SUSE-SU-2026:5196-1 |
Show 13 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES for SAP 16.0 | openssl-3 | 3.5.0-160000.11.1 | SUSE-SU-2026:24245-1 |
| SLES for SAP 15 SP6 | openssl-1_1 | 1.1.1w-150600.5.43.1 | SUSE-SU-2026:5206-1 |
| SLES for SAP 15 SP6 | openssl-3 | 3.1.4-150600.5.67.1 | SUSE-SU-2026:4419-1 |
| SLES for SAP 15 SP5 | openssl-1_1 | 1.1.1l-150500.17.68.1 | SUSE-SU-2026:5197-1 |
| SLES for SAP 15 SP5 | openssl-3 | 3.0.8-150500.5.80.1 | SUSE-SU-2026:4412-1 |
| SLES for SAP 15 SP4 | openssl-1_1 | 1.1.1l-150400.7.107.1 | SUSE-SU-2026:5205-1 |
| SLES for SAP 15 SP4 | openssl-3 | 3.0.8-150400.4.101.1 | SUSE-SU-2026:4413-1 |
| SLES 16.0 | openssl-3 | 3.5.0-160000.11.1 | SUSE-SU-2026:24245-1 |
| SLE Micro 6.2 | openssl-3 | 3.5.0-160000.11.1 | SUSE-SU-2026:24188-1 |
| SLE Micro 6.1 | openssl-3 | 3.1.4-slfo.1.1_14.1 | SUSE-SU-2026:24273-1 |
| SLE Micro 6.0 | openssl-3 | 3.1.4-159998.1.1 | SUSE-SU-2026:24133-1 |
| SLE Micro 5.5 | openssl-1_1 | 1.1.1l-150500.17.68.1 | SUSE-SU-2026:5197-1 |
| SLE Micro 5.4 | openssl-1_1 | 1.1.1l-150400.7.107.1 | SUSE-SU-2026:5205-1 |
| SLE Micro 5.4 | openssl-3 | 3.0.8-150400.4.101.1 | SUSE-SU-2026:4413-1 |
| SLE Micro 5.3 | openssl-3 | 3.0.8-150400.4.101.1 | SUSE-SU-2026:4413-1 |
| SLE HPC 15 SP5 | openssl-1_1 | 1.1.1l-150500.17.68.1 | SUSE-SU-2026:5197-1 |
| SLE HPC 15 SP5 | openssl-3 | 3.0.8-150500.5.80.1 | SUSE-SU-2026:4412-1 |
| SLE HPC 15 SP4 | openssl-1_1 | 1.1.1l-150400.7.107.1 | SUSE-SU-2026:5205-1 |
| SLE HPC 15 SP4 | openssl-3 | 3.0.8-150400.4.101.1 | SUSE-SU-2026:4413-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Leap 16.0 | openssl-3 | 3.5.0-160000.11.1 | openSUSE-SU-2026:22102-1 |
Alpine
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Alpine v3.21 | openssl | 3.3.7-r2 | — |
Azure Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Azure Linux 3 | edk2 | 20240524git3e722403cd16-21 | — |
| Azure Linux 3 | openssl | 3.3.7-7 | — |
| Azure Linux 3 | qemu +5 | No fix yet | — |
Wolfi
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Wolfi rolling | openssl-4.0 +2 | 4.0.3-r0 | — |
Advisories 22
- RLSA-2026:98588 Moderate: openssl security, bug fix, and enhancement update Rocky Linux Security Advisories · Nov 13, 2026
- RLSA-2026:98484 Moderate: openssl security, bug fix, and enhancement update Rocky Linux Security Advisories · Nov 13, 2026
- WID-SEC-2026-3638 OpenSSL: Mehrere Schwachstellen BSI CERT-Bund (WID) · Nov 12, 2026
- SUSE-SU-2026:5206-1 Security update for openssl-1_1 SUSE / openSUSE Security Updates · Nov 12, 2026
- SUSE-SU-2026:5205-1 Security update for openssl-1_1 SUSE / openSUSE Security Updates · Nov 12, 2026
- SUSE-SU-2026:5197-1 Security update for openssl-1_1 SUSE / openSUSE Security Updates · Nov 12, 2026
- SUSE-SU-2026:5196-1 Security update for openssl-1_1 SUSE / openSUSE Security Updates · Nov 12, 2026
- SUSE-SU-2026:5172-1 Security update for openssl-1_1 SUSE / openSUSE Security Updates · Nov 11, 2026
- SSA-457936 SSA-457936: Vulnerabilities in the additional GNU/Linux subsystem of the SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP V3.1.7 Siemens ProductCERT · Nov 10, 2026
- SUSE-SU-2026:24273-1 Security update for openssl-3 SUSE / openSUSE Security Updates · Oct 27, 2026
- SUSE-SU-2026:24245-1 Security update for openssl-3 SUSE / openSUSE Security Updates · Oct 21, 2026
- SUSE-SU-2026:24188-1 Security update for openssl-3 SUSE / openSUSE Security Updates · Oct 20, 2026
- RHSA-2026:74162 Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2026:74166 Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- openSUSE-SU-2026:22102-1 Security update for openssl-3 SUSE / openSUSE Security Updates · Oct 19, 2026
- SUSE-SU-2026:24133-1 Security update for openssl-3 SUSE / openSUSE Security Updates · Oct 15, 2026
- SUSE-SU-2026:4412-1 Security update for openssl-3 SUSE / openSUSE Security Updates · Oct 2, 2026
- SUSE-SU-2026:4413-1 Security update for openssl-3 SUSE / openSUSE Security Updates · Oct 2, 2026
- SUSE-SU-2026:4414-1 Security update for openssl-3 SUSE / openSUSE Security Updates · Oct 2, 2026
- SUSE-SU-2026:4419-1 Security update for openssl-3 SUSE / openSUSE Security Updates · Oct 2, 2026
- USN-8847-2 openssl, openssl1.0 vulnerabilities Ubuntu Security Notices (USN) · Oct 2, 2026
- USN-8847-1 openssl vulnerabilities Ubuntu Security Notices (USN) · Oct 2, 2026
References
- OpenSSL Advisory vendor-advisory
- 4.0.3 git commit patch
- 3.6.5 git commit patch
- 3.5.9 git commit patch
- 3.4.8 git commit patch