Mbed TLS Race Condition Vulnerability in AESNI Detection Allowing Key Extraction or GCM Forgery

A race condition vulnerability has been identified in Mbed TLS versions prior to 3.6.4, specifically in the AESNI detection process. This vulnerability arises when certain compiler optimizations are applied. In a multithreaded environment, an attacker may exploit this race condition to extract an AES key from the program or to forge GCM (Galois/Counter Mode) authentication.

Impact

Exploitation of this vulnerability could lead to the extraction of AES keys from a multithreaded program or allow for GCM forgery, undermining the integrity of GCM authentication.