CVE-2026-64313

CVE CVE-2026-64313EUVD EUVD-2026-49025Published 2026-07-25T08:49:44.000ZLast changed 2026-08-05T12:40:52.000ZCVSS 8.8

What the advisory describes

In the Linux kernel, the following vulnerability has been resolved: crypto: ecc - Fix carry overflow in vli multiplication The carry flag calculation fails when r01.m_high is saturated (0xFFFFFFFFFFFFFFFF) and addition of lower bits overflows. The condition (r01.m_high < product.m_high) doesn't handle the case where r01.m_high == product.m_high and an additional carry exists from lower-bit overflow. When commit 3c4b23901a0c ("crypto: ecdh - Add ECDH software support") introduced crypto/ecc.c, it split the muladd() function in the micro-ecc library into separate mul_64_64() and add_128_128() helpers. It seems the check got lost in translation. Add proper handling for this boundary by accounting for the carry from the lower addition.

Source: EUVD (ENISA), in the words of the advisory.

Products the advisory names

These come from the advisory itself, not from any check we performed.

Linux — Linux 3c4b23901a0c766879dff680cd6bdab47bcdbbd2 <5275e0fca256d081e2e7d4ba3dd8216c6e50d44e; 4.8; 3c4b23901a0c766879dff680cd6bdab47bcdbbd2 <ebaae7c4251cc0cdb2602f334d4f08a3e82d271e; 3c4b23901a0c766879dff680cd6bdab47bcdbbd2 <27b536a2ec8e2f85a0380c2d13c9ecbc7aaab406; 3c4b23901a0c766879dff680cd6bdab47bcdbbd2 <774ddddf5eb26eeca177350413e3e2bc50930ee9; patch: 6.12.96; patch: 5.10.261; patch: 6.1.178; 3c4b23901a0c766879dff680cd6bdab47bcdbbd2 <d11b2bb99bec1f5557c01cac42231e23745f49b8; 3c4b23901a0c766879dff680cd6bdab47bcdbbd2 <24a54dfa06d09813b4802a374fad3d2c0e16a884; patch: 0; 3c4b23901a0c766879dff680cd6bdab47bcdbbd2 <677450e5ef850c4d28b7956aa01104548c2a894e; patch: 7.2-rc1; patch: 7.1.4; patch: 6.6.145; patch: 5.15.212; 3c4b23901a0c766879dff680cd6bdab47bcdbbd2 <b709e0e768766abe29a49e1c1922a1604be602f4; patch: 6.18.39

The versions shown are the advisory's own. Patchlage compares no version numbers and derives no judgement from them — which version is installed is something a person has to look up.

Carried in the product catalogue

An estate covering these products can be recorded in Patchlage. An advisory about them appears in the next morning's situation report.

Linux — Linux

Does this concern one of your customers?

This page cannot answer that — it does not know your estate. Whoever has recorded their environments gets the answer the morning after publication, together with a paragraph they can forward to the customer unedited.

Try it for 28 days

Patchlage reports hits and suspected hits. About everything else this system says nothing — neither this page nor the situation report ever claims that an estate is safe.