HomeDefectsLIN1022-3457
Not to be fixed

LIN1022-3457 : Security Advisory - go - CVE-2023-24532

Created: Feb 23, 2023    Updated: Dec 30, 2025
Resolved Date: Dec 30, 2025
Found In Version: 10.22.33.1
Severity: Standard
Applicable for: Wind River Linux LTS 22
Component/s: Userspace

Description

The ScalarMult and ScalarBaseMult methods of the P256 Curve may return an incorrect result if called with some specific unreduced scalars (a scalar larger than the order of the curve). This does not impact usages of crypto/ecdsa or crypto/ecdh.

https://nvd.nist.gov/vuln/detail/CVE-2023-24532