VDB
RHSA-2025%3A8670
RHSA-2025%3A8670
PUBLISHED
CVSS 5.300000190734863 MEDIUM
A flaw was found in the Golang crypto/internal/nistec package. Due to the usage of a variable time instruction in the assembly implementation of an internal function, a small number of bits of secret scalars are leaked on the ppc64le architecture. Considering how this function is used, this leakage is likely insufficient to recover the private key when P-256 is used in any well-known protocols.
Risk Scores
CVSS 3.1
5.300000190734863
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | openshift-serverless-1/logic-operator-bundle@sha256:2b648040e6f0ec313c9fe34b76d78d64431f6a899c949959cef13329fe4e01ca_arm64 as a component of 8Base-Openshift-Serverless-1.36 | * |
| Red Hat | openshift-serverless-1/logic-data-index-postgresql-rhel8@sha256:fe0aedda3b468d2f7cdb87f4246d06f95903dc43c921762cbef049b9f2b8260c_arm64 as a component of 8Base-Openshift-Serverless-1.36 | openshift-serverless-1/logic-data-index-postgresql-rhel8@sha256:fe0aedda3b468d2f7cdb87f4246d06f95903dc43c921762cbef049b9f2b8260c_arm64, openshift-serverless-1/logic-data-index-postgresql-rhel8@sha256:fe0aedda3b468d2f7cdb87f4246d06f95903dc43c921762cbef049b9f2b8260c_arm64, * |
| Red Hat | openshift-serverless-1/logic-jobs-service-ephemeral-rhel8@sha256:cb95d6eb0d9d5f6f9ab58dae65d4dcabf2ea429561abca3957ac6eec8f307781_amd64 as a component of 8Base-Openshift-Serverless-1.36 | *, *, * |
| Red Hat | openshift-serverless-1/logic-jobs-service-postgresql-rhel8@sha256:7cb46aa137b94c2250afb78873fb5c4d0d28d0371f0a388e8ea7db6243df2b60_ppc64le as a component of 8Base-Openshift-Serverless-1.36 | openshift-serverless-1/logic-jobs-service-postgresql-rhel8@sha256:7cb46aa137b94c2250afb78873fb5c4d0d28d0371f0a388e8ea7db6243df2b60_ppc64le |
| Red Hat | openshift-serverless-1/logic-swf-builder-rhel8@sha256:6bddeab87c0785a256de8fb7365d16d54628ab863a0f071b1981aa9a23d68a5a_amd64 as a component of 8Base-Openshift-Serverless-1.36 | openshift-serverless-1/logic-swf-builder-rhel8@sha256:6bddeab87c0785a256de8fb7365d16d54628ab863a0f071b1981aa9a23d68a5a_amd64 |
| Red Hat | openshift-serverless-1/logic-operator-bundle@sha256:4b9f1b547618528b0fb40335b7bcc1c4c053c4af19a435166bef2dc37690f490_ppc64le as a component of 8Base-Openshift-Serverless-1.36 | openshift-serverless-1/logic-operator-bundle@sha256:4b9f1b547618528b0fb40335b7bcc1c4c053c4af19a435166bef2dc37690f490_ppc64le |
| Red Hat | openshift-serverless-1/logic-jobs-service-postgresql-rhel8@sha256:12a9d369e0179e7b7c1a3f2c82dd270656450588c4554b4f038cb2223d70c4f2_amd64 as a component of 8Base-Openshift-Serverless-1.36 | openshift-serverless-1/logic-jobs-service-postgresql-rhel8@sha256:12a9d369e0179e7b7c1a3f2c82dd270656450588c4554b4f038cb2223d70c4f2_amd64, openshift-serverless-1/logic-jobs-service-postgresql-rhel8@sha256:12a9d369e0179e7b7c1a3f2c82dd270656450588c4554b4f038cb2223d70c4f2_amd64, * |
| Red Hat | openshift-serverless-1/logic-db-migrator-tool-rhel8@sha256:25e094b297c3dc22530bdb731a71ccbd4dfa296c012b5f17c94f8f5a9585e0cf_arm64 as a component of 8Base-Openshift-Serverless-1.36 | openshift-serverless-1/logic-db-migrator-tool-rhel8@sha256:25e094b297c3dc22530bdb731a71ccbd4dfa296c012b5f17c94f8f5a9585e0cf_arm64, *, openshift-serverless-1/logic-db-migrator-tool-rhel8@sha256:25e094b297c3dc22530bdb731a71ccbd4dfa296c012b5f17c94f8f5a9585e0cf_arm64 |
| Red Hat | openshift-serverless-1/logic-jobs-service-ephemeral-rhel8@sha256:f06f44d53843b8ec14b571b300062e41f5926a38c6838730c8db2607973aaad7_ppc64le as a component of 8Base-Openshift-Serverless-1.36 | openshift-serverless-1/logic-jobs-service-ephemeral-rhel8@sha256:f06f44d53843b8ec14b571b300062e41f5926a38c6838730c8db2607973aaad7_ppc64le |
| Red Hat | openshift-serverless-1/logic-operator-bundle@sha256:2b648040e6f0ec313c9fe34b76d78d64431f6a899c949959cef13329fe4e01ca_arm64 as a component of 8Base-Openshift-Serverless-1.36 | *, *, openshift-serverless-1/logic-operator-bundle@sha256:2b648040e6f0ec313c9fe34b76d78d64431f6a899c949959cef13329fe4e01ca_arm64 |
| Red Hat | openshift-serverless-1/logic-jobs-service-postgresql-rhel8@sha256:12a9d369e0179e7b7c1a3f2c82dd270656450588c4554b4f038cb2223d70c4f2_amd64 as a component of 8Base-Openshift-Serverless-1.36 | openshift-serverless-1/logic-jobs-service-postgresql-rhel8@sha256:12a9d369e0179e7b7c1a3f2c82dd270656450588c4554b4f038cb2223d70c4f2_amd64 |
| Red Hat | openshift-serverless-1/logic-swf-devmode-rhel8@sha256:bfd4753e43035752ca5b55b4bea25c7b6148ed1e963d16a240cfa3fe83403976_arm64 as a component of 8Base-Openshift-Serverless-1.36 | openshift-serverless-1/logic-swf-devmode-rhel8@sha256:bfd4753e43035752ca5b55b4bea25c7b6148ed1e963d16a240cfa3fe83403976_arm64 |
| Red Hat | openshift-serverless-1/logic-jobs-service-ephemeral-rhel8@sha256:f06f44d53843b8ec14b571b300062e41f5926a38c6838730c8db2607973aaad7_ppc64le as a component of 8Base-Openshift-Serverless-1.36 | *, openshift-serverless-1/logic-jobs-service-ephemeral-rhel8@sha256:f06f44d53843b8ec14b571b300062e41f5926a38c6838730c8db2607973aaad7_ppc64le, openshift-serverless-1/logic-jobs-service-ephemeral-rhel8@sha256:f06f44d53843b8ec14b571b300062e41f5926a38c6838730c8db2607973aaad7_ppc64le |
| Red Hat | openshift-serverless-1/logic-rhel8-operator@sha256:645cbe692fa26174d936d8e7c7471a2d6afe3e23e67e13930d0f91c45e853e92_ppc64le as a component of 8Base-Openshift-Serverless-1.36 | openshift-serverless-1/logic-rhel8-operator@sha256:645cbe692fa26174d936d8e7c7471a2d6afe3e23e67e13930d0f91c45e853e92_ppc64le |
| Red Hat | openshift-serverless-1/logic-swf-devmode-rhel8@sha256:c1937771fd70a5dae2ec2aee3723e7fd0243561e3006c93a367580d84bd1fb9a_ppc64le as a component of 8Base-Openshift-Serverless-1.36 | openshift-serverless-1/logic-swf-devmode-rhel8@sha256:c1937771fd70a5dae2ec2aee3723e7fd0243561e3006c93a367580d84bd1fb9a_ppc64le |
| Red Hat | openshift-serverless-1/logic-jobs-service-ephemeral-rhel8@sha256:cb95d6eb0d9d5f6f9ab58dae65d4dcabf2ea429561abca3957ac6eec8f307781_amd64 as a component of 8Base-Openshift-Serverless-1.36 | openshift-serverless-1/logic-jobs-service-ephemeral-rhel8@sha256:cb95d6eb0d9d5f6f9ab58dae65d4dcabf2ea429561abca3957ac6eec8f307781_amd64 |
| Red Hat | openshift-serverless-1/logic-swf-devmode-rhel8@sha256:bfd4753e43035752ca5b55b4bea25c7b6148ed1e963d16a240cfa3fe83403976_arm64 as a component of 8Base-Openshift-Serverless-1.36 | *, openshift-serverless-1/logic-swf-devmode-rhel8@sha256:bfd4753e43035752ca5b55b4bea25c7b6148ed1e963d16a240cfa3fe83403976_arm64, openshift-serverless-1/logic-swf-devmode-rhel8@sha256:bfd4753e43035752ca5b55b4bea25c7b6148ed1e963d16a240cfa3fe83403976_arm64 |
| Red Hat | openshift-serverless-1/logic-db-migrator-tool-rhel8@sha256:697d958c4601b70df1310076ee216da6d2501907edc8efd3a0fb20ecde1e71a8_ppc64le as a component of 8Base-Openshift-Serverless-1.36 | openshift-serverless-1/logic-db-migrator-tool-rhel8@sha256:697d958c4601b70df1310076ee216da6d2501907edc8efd3a0fb20ecde1e71a8_ppc64le, openshift-serverless-1/logic-db-migrator-tool-rhel8@sha256:697d958c4601b70df1310076ee216da6d2501907edc8efd3a0fb20ecde1e71a8_ppc64le, * |
| Red Hat | openshift-serverless-1/logic-jobs-service-ephemeral-rhel8@sha256:bc8c1cdf638bdd0fa999b6a0cbd2f9b0611c75fafe1a722d538ee3540c5112d7_arm64 as a component of 8Base-Openshift-Serverless-1.36 | openshift-serverless-1/logic-jobs-service-ephemeral-rhel8@sha256:bc8c1cdf638bdd0fa999b6a0cbd2f9b0611c75fafe1a722d538ee3540c5112d7_arm64, *, * |
| Red Hat | openshift-serverless-1/logic-swf-builder-rhel8@sha256:6bddeab87c0785a256de8fb7365d16d54628ab863a0f071b1981aa9a23d68a5a_amd64 as a component of 8Base-Openshift-Serverless-1.36 | *, *, * |
…and 36 more
Timeline
- Jun 9, 2025 CVE Published
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- May 15, 2026 CVE Updated
References
- https://access.redhat.com/errata/RHSA-2025:8670 advisory
- https://access.redhat.com/security/updates/classification/#moderate advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_8670.json advisory
- https://access.redhat.com/security/cve/CVE-2025-22866 advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2344219 issue
- https://www.cve.org/CVERecord?id=CVE-2025-22866 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2025-22866 advisory
- https://go.dev/cl/643735 advisory
- https://go.dev/issue/71383 advisory
- https://groups.google.com/g/golang-announce/c/xU1ZCHUZw3k advisory
- https://pkg.go.dev/vuln/GO-2025-3447 advisory
- https://access.redhat.com/security/cve/CVE-2025-22871 advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2358493 issue
- https://www.cve.org/CVERecord?id=CVE-2025-22871 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2025-22871 advisory
- https://go.dev/cl/652998 advisory
- https://go.dev/issue/71988 advisory
- https://groups.google.com/g/golang-announce/c/Y2uBTVKjBQk advisory
- https://pkg.go.dev/vuln/GO-2025-3563 advisory