OpenSSL contains a vulnerability (CVE-2024-9143) related to improper handling of memory operations when using low-level GF(2^m) elliptic curve APIs with untrusted explicit values for the field polynomial. This uncommon usage can allow a remote attacker to cause a crash (denial of service) or potentially execute arbitrary code. The issue is fixed in updated OpenSSL packages for Ubuntu 20.04 LTS, 22.04 LTS, and 24.04 LTS. Users should update and reboot to apply the fix.