CVE-2025-9231 json
Timing side-channel in SM2 algorithm on 64 bit ARM
published 2025-09-30 13 mo ago modified 2026-11-06 2 d ago also EUVD-2025-31728 , GHSA-9mrx-mqmg-gwj9 , JLSEC-2026-267
- cvss
- 5.9
- version 3.1, CNA
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 1.5%
- EPSS 1.5% chance of exploitation in 30 days, percentile 73%
- public exploits
- 0
- none known
Summary
Issue summary: A timing side-channel which could potentially allow remote recovery of the private key exists in the SM2 algorithm implementation on 64 bit ARM platforms.
Impact summary: A timing side-channel in SM2 signature computations on 64 bit ARM platforms could allow recovering the private key by an attacker..
While remote key recovery over a network was not attempted by the reporter, timing measurements revealed a timing signal which may allow such an attack.
OpenSSL does not directly support certificates with SM2 keys in TLS, and so this CVE is not relevant in most TLS contexts. However, given that it is possible to add support for such certificates via a custom provider, coupled with the fact that in such a custom provider context the private key may be recoverable via remote timing measurements, we consider this to be a Moderate severity issue.
The FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this issue, as SM2 is not an approved algorithm.
Patch / fix
- julia OpenSSL_jll 3.5.4+0
- OpenSSL OpenSSL 3.2.6, 3.3.5, 3.4.3, 3.5.4
- Siemens RUGGEDCOM RST2428P V3.3, V4.0
- Siemens SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family V3.3
- Siemens SCALANCE XCH328 V3.3
- Siemens SCALANCE XCM324 V3.3
- Siemens SCALANCE XCM328 V3.3
- Siemens SCALANCE XCM332 V3.3
- Siemens SCALANCE XRH334 (24 V DC, 8xFO, CC) V3.3
- Siemens SCALANCE XRM334 (230 V AC, 12xFO) V3.3
- Siemens SCALANCE XRM334 (230 V AC, 8xFO) V3.3
- Siemens SCALANCE XRM334 (230V AC, 2x10G, 24xSFP, 8xSFP+) V3.3
- Siemens SCALANCE XRM334 (24 V DC, 12xFO) V3.3
- Siemens SCALANCE XRM334 (24 V DC, 8xFO) V3.3
- Siemens SCALANCE XRM334 (24V DC, 2x10G, 24xSFP, 8xSFP+) V3.3
- Siemens SCALANCE XRM334 (2x230 V AC, 12xFO) V3.3
- Siemens SCALANCE XRM334 (2x230 V AC, 8xFO) V3.3
- Siemens SCALANCE XRM334 (2x230V AC, 2x10G, 24xSFP, 8xSFP+) V3.3
- Siemens SIDIS Secured SmartPlug V7.26.0310
- Siemens SIMATIC CN 4100 V5.0
- openssl Debian 13 3.5.1-1+deb13u1
- openssl Debian 14 3.5.4-1
debian advisories DEBIAN-CVE-2025-9231
- openssl Ubuntu 26.04 LTS, Ubuntu 25.10 3.5.3-1ubuntu2
ubuntu advisories UBUNTU-CVE-2025-9231
Ubuntu security data © Canonical Ltd., from https://github.com/canonical/ubuntu-security-notices via OSV; changed: normalised to fixed package versions per release. CC BY-SA 4.0
- openssl hummingbird 1 3.5.6-0.1.hum1
- openssl-libs hummingbird 1 3.5.6-0.1.hum1
- openssl-perl hummingbird 1 3.5.6-0.1.hum1
- openssl-config-fips hummingbird 1 3.5.6-0.1.hum1
- openssl-devel-engine hummingbird 1 3.5.6-0.1.hum1
red hat advisories RHSA-2026:7261
- openssl-3 SLE Module for Basesystem 15 SP7 3.5.0-150700.5.45.2
- openssl SLE Module for Basesystem 15 SP7 3.5.0-150700.3.4.1
- nodejs24 SLE Module for Web and Scripting 15 SP7 24.18.1-150700.15.18.1
- openssl-3 SLES 16.0, Linux Micro 6.2, SLES for SAP applications 16.0 3.5.0-160000.4.1
suse advisories SUSE-SU-2026:3835-1SUSE-SU-2025:21213-1SUSE-SU-2025:21224-1
- openssl-3 openSUSE Tumbleweed 3.5.3-2.1
- openssl-3 openSUSE Leap 16.0 3.5.0-160000.4.1
- regclient openSUSE Tumbleweed 0.10.0-1.1
opensuse advisories openSUSE-SU-2026:10237-1openSUSE-SU-2025:20164-1openSUSE-SU-2025:15723-1
- openssl Alpine 3.21, Alpine 3.20 3.3.5-r0
- openssl Alpine 3.24, Alpine 3.23, Alpine 3.22 3.5.4-r0
alpine advisories ALPINE-CVE-2025-9231
Alpine secdb © Alpine Linux, from https://secdb.alpinelinux.org via OSV; changed: normalised to fixed package versions per release. CC BY-SA 4.0
Vendor advisories
What the vendors themselves say about their products: affected, fixed or not affected, and what to do.
red hat product security vex CVE-2025-9231 updated cvss 5.9
openssl: Timing side-channel in SM2 algorithm on 64 bit ARM
-
Red Hat Hardened Images openssl 3.5.6-0.1.hum1, openssl-libs 3.5.6-0.1.hum1, openssl-perl 3.5.6-0.1.hum1, openssl-config-fips 3.5.6-0.1.hum1, openssl-devel-engine 3.5.6-0.1.hum1fixed: vendor fix RHSA-2026:7261
-
Red Hat Enterprise Linux 6 openssl, openssl-perl Red Hat Enterprise Linux 7 ovmf, OVMF, AAVMF, openssl, openssl-libs, openssl-perl Red Hat Enterprise Linux 8 edk2, shim, openssl, shim-x64, edk2-ovmf, shim-aa64, +9 more Red Hat Enterprise Linux 9 edk2, shim, openssl, shim-x64, edk2-ovmf, shim-aa64, +7 more Red Hat Enterprise Linux 10 edk2, shim, openssl, shim-unsigned-x64, shim-unsigned-aarch64not affected: vulnerable code not present
-
Red Hat JBoss Core Services openssl Red Hat OpenShift Container Platform 4 openshift/ose-rhel-coreos-8, openshift/ose-rhel-coreos-9not affected: component not present
Red Hat CSAF VEX © Red Hat, Inc., from https://security.access.redhat.com/data/csaf/v2/vex/; changed: reduced to product statuses and remediations. CC BY 4.0 · csaf
cisa ICSA-26-202-04 updated cvss 6.5
Siemens SIDIS Secured SmartPlug
-
Siemens SIDIS Secured SmartPlug < 7.26.0310affected: fixed in V7.26.0310
Facts from CISA's republication of the vendor's own advisory (CSAF); the linked advisory is the authoritative source. CISA notification · csaf
cisa ICSA-26-188-05 updated cvss 6.5
Siemens SINEC OS
-
Siemens RUGGEDCOM RST2428P (6GK6242-6PA00) < 4.0affected: fixed in V4.0 support.industry.siemens.com
Facts from CISA's republication of the vendor's own advisory (CSAF); the linked advisory is the authoritative source. CISA notification · csaf
cisa ICSA-26-134-10 updated cvss 6.5
Siemens SIMATIC
-
Siemens SIMATIC CN 4100 < 5.0affected: fixed in V5.0 support.industry.siemens.com
Facts from CISA's republication of the vendor's own advisory (CSAF); the linked advisory is the authoritative source. CISA notification · csaf
cisa ICSA-26-043-06 updated cvss 6.5
Siemens SINEC OS
-
Siemens RUGGEDCOM RST2428P (6GK6242-6PA00) < 3.3affected: fixed in V3.3 support.industry.siemens.com
-
Siemens SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family < 3.3affected: fixed in V3.3
-
Siemens SCALANCE XCH328 (6GK5328-4TS01-2EC2) < 3.3 Siemens SCALANCE XCM324 (6GK5324-8TS01-2AC2) < 3.3 Siemens SCALANCE XCM328 (6GK5328-4TS01-2AC2) < 3.3 Siemens SCALANCE XCM332 (6GK5332-0GA01-2AC2) < 3.3 Siemens SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3) < 3.3 Siemens SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3) < 3.3affected: fixed in V3.3 support.industry.siemens.com
+8 more productsfewer
Siemens SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3) < 3.3 Siemens SCALANCE XRM334 (2x230V AC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-4AR3) < 3.3 Siemens SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3) < 3.3 Siemens SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3) < 3.3 Siemens SCALANCE XRM334 (24V DC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-2AR3) < 3.3 Siemens SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3) < 3.3 Siemens SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3) < 3.3 Siemens SCALANCE XRM334 (230V AC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-3AR3) < 3.3
Facts from CISA's republication of the vendor's own advisory (CSAF); the linked advisory is the authoritative source. CISA notification · csaf
CISA SSVC
- Exploitation
- none
- Automatable
- no
- Technical impact
- partial
- Assessed
- 13 mo ago
Exploit prediction
1.47% chance of exploitation in the next 30 days, higher than 73% of all scored CVEs (FIRST EPSS, 2026-11-08).
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| CISA ADP | 3.1 | 5.9 | CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N |
| CNA | 3.1 | 5.9 | CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N |
| OSV | 3.1 | 6.5 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L |
Affected packages
| ecosystem | package | affected | fixed in |
|---|---|---|---|
| julia | OpenSSL_jll | >=3.5.0+0, <3.5.4+0 |
3.5.4+0 |
Affected products
- OpenSSL OpenSSL
- Siemens RUGGEDCOM RST2428P
- Siemens SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family
- Siemens SCALANCE XCH328
- Siemens SCALANCE XCM324
- Siemens SCALANCE XCM328
- Siemens SCALANCE XCM332
- Siemens SCALANCE XRH334 (24 V DC, 8xFO, CC)
- Siemens SCALANCE XRM334 (230 V AC, 12xFO)
- Siemens SCALANCE XRM334 (230 V AC, 8xFO)
- Siemens SCALANCE XRM334 (230V AC, 2x10G, 24xSFP, 8xSFP+)
- Siemens SCALANCE XRM334 (24 V DC, 12xFO)
- Siemens SCALANCE XRM334 (24 V DC, 8xFO)
- Siemens SCALANCE XRM334 (24V DC, 2x10G, 24xSFP, 8xSFP+)
- Siemens SCALANCE XRM334 (2x230 V AC, 12xFO)
- Siemens SCALANCE XRM334 (2x230 V AC, 8xFO)
- Siemens SCALANCE XRM334 (2x230V AC, 2x10G, 24xSFP, 8xSFP+)
- Siemens SIDIS Secured SmartPlug
- Siemens SIMATIC CN 4100
Classification
- Weakness
-
- CWE-385 Covert Timing Channel
- Technology feeds
References
-
github.com
/openssl/openssl/commit/fc47a2ec078912b3e914fab5734535e76c4820c2
patch, web
-
github.com
/openssl/openssl/commit/eed5adc9f969d77c94f213767acbb41ff923b6f4
patch, web
-
github.com
/openssl/openssl/commit/567f64386e43683888212226824b6a179885a0fe
patch, web
-
github.com
/openssl/openssl/commit/cba616c26ac8e7b37de5e77762e505ba5ca51698
patch, web
-
openssl-library.org
/news/secadv/20250930.txt
vendor-advisory, web
-
openwall.com
/lists/oss-security/2025/09/30/5
web
-
openwall.com
/lists/oss-security/2026/05/11/11
web
-
cert-portal.siemens.com
/productcert/html/ssa-089022.html
web
-
cert-portal.siemens.com
/productcert/html/ssa-032379.html
web
-
cert-portal.siemens.com
/productcert/html/ssa-253495.html
web
-
cert-portal.siemens.com
/productcert/html/ssa-585531.html
web
-
github.com
/advisories/GHSA-9mrx-mqmg-gwj9
web
-
nvd.nist.gov
/vuln/detail/CVE-2025-9231
web
Sources
- CVE List CVE-2025-9231
- NVD CVE-2025-9231
- OSV JLSEC-2026-267
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.