Search: CVE-2026-77696

A timing side-channel vulnerability exists in OpenSSL's SM2 signature generation, where non-constant-time arithmetic on secret values may allow attackers to infer sensitive information. This issue affects multiple OpenSSL versions used in various Ubuntu LTS releases. The vulnerability has a low CVSS score of 3.7 and does not impact integrity or availability. Official patches are available from Ubuntu to address this issue.