CVE-2024-37880 Information disclosure in n/a
Attackers can recover ML-KEM 512 secret keys via timing side channels when the Kyber library is compiled with specific Clang optimizations.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2024-37880?
CVE-2024-37880 is a high-severity vulnerability in n/a, published on 10 Jun 2024. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
The Kyber reference implementation before 9b8d306, when compiled by LLVM Clang through 18.x with some common optimization options, has a timing side channel that allows attackers to recover an ML-KEM 512 secret key in minutes. This occurs because poly_frommsg in poly.c does not prevent Clang from emitting a vulnerable secret-dependent branch.
Weakness: CWE-203
Which versions are affected by CVE-2024-37880?
It affects 1 product.
Products include Pq-Crystals Kyber.
How do I fix CVE-2024-37880?
No fix has been published for CVE-2024-37880 yet. Limit exposure of the affected software until one is available.
Is CVE-2024-37880 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2024-37880 exists.
Sources
Also known as GHSA-58rr-w6gv-4p4h.