CVE-2023-52616: Debian Linux

Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days.

In the Linux kernel, the following vulnerability has been resolved: crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init When the mpi_ec_ctx structure is initialized, some fields are not cleared, causing a crash when referencing the field when the structure was released. Initially, this issue was ignored because memory for mpi_ec_ctx is allocated with the __GFP_ZERO flag. For example, this error will be triggered when calculating the Za value for SM2 separately.

Affected products

• Debian Debian Linux: version 10.0 only
• Linux Linux Kernel: from 5.10, before 5.10.210 (fixed in 5.10.210); from 5.11, before 5.15.149 (fixed in 5.15.149); from 5.16, before 6.1.79 (fixed in 6.1.79); from 6.2, before 6.6.15 (fixed in 6.6.15); from 6.7, before 6.7.3 (fixed in 6.7.3)

Published 2024-03-18. Last modified 2026-08-04.