Wind River Support Network

HomeDefectsLIN1023-11776
Fixed

LIN1023-11776 : Security Advisory - mbedtls - CVE-2025-27810

Created: Mar 24, 2025    Updated: Feb 11, 2026
Resolved Date: Jan 22, 2026
Found In Version: 10.23.30.1
Fix Version: 10.23.30.20
Severity: Standard
Applicable for: Wind River Linux LTS 23
Component/s: Userspace

Description

During the TLS handshake, the Finished message ensures that the handshake has not been tampered with by an active attacker. If a memory allocation fails or a cryptographic hardware driver returns an error at a specific point during the handshake, the Finished message will be incorrectly calculated to be the contents of uninitialized stack memory.

CVEs

  • Linkedin
  • Facebook
  • Twitter
  • Youtube