CVE-2026-64313

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the crypto: ecc component where a carry overflow occurs during vli multiplication. The carry flag calculation fails when r01.m high is saturated and the addition of lower bits overflows. Specifically, the condition (r01.m high < product.m high) fails to account for cases where r01.m high equals product.m high while an additional carry exists from a lower-bit overflow. This occurred after the muladd() function from the micro-ecc library was split into mul 64 64() and add 128 128() helpers.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.