RUSTSEC-2026-0126
AVX2 Implementation Did Not Fully Reduce Intermediate Values
The AVX2 implementation of ML-DSA did not fully reduce intermediate inputs to the inverse NTT, which leads to a testable difference in panic behaviour of internal functions compared to the portable implementation.
Impact
We are not aware of inputs to the public key generation, signing or verification APIs that trigger a panic in the AVX2 implementation because the intermediate values were not fully reduced.
Mitigation
From version 0.0.9 intermediate values on AVX2 platforms are fully
reduced in alignment with the portable implementation.
What each source reports
OSV No score
AVX2 Implementation Did Not Fully Reduce Intermediate Values
The AVX2 implementation of ML-DSA did not fully reduce intermediate inputs to the inverse NTT, which leads to a testable difference in panic behaviour of internal functions compared to the portable implementation.
Impact
We are not aware of inputs to the public key generation, signing or verification APIs that trigger a panic in the AVX2 implementation because the intermediate values were not fully reduced.
Mitigation
From version 0.0.9 intermediate values on AVX2 platforms are fully
reduced in alignment with the portable implementation.
- Record
RUSTSEC-2026-0126- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
libcrux-ml-dsacrates.io |
0.0.0-0 up to 0.0.9 | 0.0.9 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
RUSTSEC-2026-0126 is a vulnerability with no CVSS score yet in libcrux-ml-dsa, published April 27, 2026. No source lists public exploit code. Fixed in libcrux-ml-dsa 0.0.9.