Search: CVE-2026-54872

A timing side-channel vulnerability exists in OpenSSL's generic elliptic-curve scalar multiplication used for ECDSA and SM2 signature operations on non-NIST curves without dedicated constant-time implementations, such as brainpoolP384r1. This vulnerability can leak secret nonce information through timing variations, potentially allowing private key recovery after many signature observations. NIST curves with constant-time implementations are not affected. The vulnerability has a low severity score and does not impact FIPS modules. Fixes are available across multiple Ubuntu LTS releases.