CVE-2025-22866
MediumSummary
A vulnerability in the assembly implementation of an internal cryptographic function on the ppc64le architecture leaks a few bits of secret scalars due to the use of a variable-time instruction. Based on how this function is used, the leakage is not sufficient to recover the private key.
Risk Assessment
The risk to the organization is low, as the leakage of a limited number of secret scalar bits does not enable private key recovery, but it may pose a theoretical threat in side-channel attack scenarios.
Recommendation
It is recommended to update the cryptographic library to a version that fixes the use of variable-time instructions on the ppc64le architecture.
Original NVD description (English source)
Due to the usage of a variable time instruction in the assembly implementation of an internal function, a small number of bits of secret scalars are leaked on the ppc64le architecture. Due to the way this function is used, we do not believe this leakage is enough to allow recovery of the private key