Coolsnowwolf Lede BN_mod_sqrt Infinite Loop Vulnerability

A vulnerability causing an infinite loop has been identified in the coolsnowwolf lede project, specifically within the MT7615D driver security modules. This issue arises in the BN_mod_sqrt() function, which was cloned from OpenSSL but did not incorporate a critical security patch. The vulnerability affects lede versions through r25.10.1.

Impact

Exploitation of this vulnerability leads to an infinite loop in the BN_mod_sqrt() function, causing the program to hang indefinitely under certain conditions.

Remediation

Users can apply the same patch that was implemented in OpenSSL to address this vulnerability. The patch is available in the official coolsnowwolf lede repository.