Medium severity · published Feb 6, 2025
CVE-2025-22866
Timing sidechannel for P-256 on ppc64le in crypto/internal/nistec
4.0
CVSS
0.3%
EPSS
No
On KEV
Description
Due to the usage of a variable time instruction in the assembly implementation of an internal function, a small number of bits of secret scalars are leaked on the ppc64le architecture. Due to the way this function is used, we do not believe this leakage is enough to allow recovery of the private key when P-256 is used in any well known protocols.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Attack vector
Local
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
Low
Integrity
None
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 21% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CR
crypto/internal/nistec · Go standard library
before 1.22.12; 1.23.0-0 before 1.23.6; 1.24.0-0 before 1.24.0-rc.3 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2025-22866
CVE.org
https://www.cve.org/CVERecord?id=CVE-2025-22866
go.dev
https://go.dev/cl/643735
go.dev
https://go.dev/issue/71383
groups.google.com
https://groups.google.com/g/golang-announce/c/xU1ZCHUZw3k
pkg.go.dev
https://pkg.go.dev/vuln/GO-2025-3447
security.netapp.com
https://security.netapp.com/advisory/ntap-20250221-0002/