The vulnerability of the ccp_run_aes_gcm_cmd() function in the drivers/crypto/ccp/ccp-ops.c module of the Linux kernel cryptographic accelerator driver allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the ccprunaesgcmcmd function in the drivers/crypto/ccp/ccp-ops.c module of the Linux kernel cryptographic accelerator driver is related to the use of a name with an incorrect reference. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

The vulnerability of the eip93_unregister_algs() function in the drivers/crypto/inside-secure/eip93/eip93-main.c file of the Linux kernel cryptographic accelerator driver allows a hacker to cause a service failure.

The vulnerability of the eip93unregisteralgs function in the drivers/crypto/inside-secure/eip93/eip93-main.c file of the Linux kernel cryptographic accelerator driver is related to improper termination or release of resources. Exploiting this vulnerability could allow a remote attacker to cause...

CVE-2026-97917

A flaw was found in the Linux kernel's Intel Versatile Processing Unit ivpu accelerator driver. A local user could trigger an out-of-bounds memory access by supplying an address range that extends beyond the allocated buffer object boundaries. This issue can lead to memory corruption or a system...

CVE-2026-97914

A flaw was found in the Linux kernel's Arm Ethos-U accelerator driver. When scheduler initialization fails during a job open operation, the driver returns an incorrect positive status code instead of a standard negative error number. A local user can trigger this issue by opening an accelerator j...

CVE-2026-97913

A flaw was found in the Linux kernel's Arm Ethos-U accelerator driver. This vulnerability can lead to a Denial of Service DoS through device timeouts or potential out-of-bounds memory access. A local user could exploit this issue by submitting a crafted command stream that lacks a required...

CVE-2026-97912

A flaw was found in the Linux kernel's Arm Ethos-U accelerator driver. When the mapping of Static Random-Access Memory SRAM fails during device initialization, the driver fails to reset the memory size to zero. Consequently, a local user can submit processing jobs that access physical address zer...

CVE-2026-97911

A flaw was found in the Linux kernel's Arm Ethos-U accelerator driver. A local user can submit a job configured with a zero Static Random-Access Memory SRAM size while still performing SRAM operations in the command stream. Because the driver skips setting the region base register when the size i...

CVE-2026-98144

A flaw was found in the Linux kernel's AMD XDNA accelerator driver. A local user could cause a denial of service DoS by triggering a resource leak during command error handling. By manipulating buffer handles and importing an unmappable memory buffer object BO, an attacker can cause buffer mappin...

CVE-2026-98143

A flaw was found in the Linux kernel's Arm Ethos-U neural processing unit NPU accelerator driver. The command stream parser incorrectly interprets hardware rounding mode fields as storage mode parameters on certain device models. A local user can exploit this vulnerability by submitting specific...

ROS-20260923-73-0025

The vulnerability of the atmelsha204aremove function in the drivers/crypto/atmel-sha204a.c driver for the Linux kernel cryptographic accelerator is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

WordPress Seraphinite Accelerator plugin < 2.29.24 - Subscriber+ DoS vulnerability

Subscriber+ DoS vulnerability discovered by Ángel PS drtz in WordPress Plugin Seraphinite Accelerator versions 2.29.24...

CVE-2026-87828

The Seraphinite Accelerator WordPress plugin before 2.29.24 does not perform a capability check on one of its state-update AJAX actions, allowing authenticated users such as subscribers to write a malformed value that causes an uncaught error on every subsequent admin page load, making the entire...

CVE-2026-87828 Seraphinite Accelerator < 2.29.24 - Subscriber+ DoS via seraph_accel_State Update

The Seraphinite Accelerator WordPress plugin before 2.29.24 does not perform a capability check on one of its state-update AJAX actions, allowing authenticated users such as subscribers to write a malformed value that causes an uncaught error on every subsequent admin page load, making the entire...

CVE-2026-87828 Seraphinite Accelerator < 2.29.24 - Subscriber+ DoS via seraph_accel_State Update

The Seraphinite Accelerator WordPress plugin before 2.29.24 does not perform a capability check on one of its state-update AJAX actions, allowing authenticated users such as subscribers to write a malformed value that causes an uncaught error on every subsequent admin page load, making the entire...

EUVD-2026-80207

The Seraphinite Accelerator WordPress plugin before 2.29.24 does not perform a capability check on one of its state-update AJAX actions, allowing authenticated users such as subscribers to write a malformed value that causes an uncaught error on every subsequent admin page load, making the entire...

CVE-2026-87828

The Seraphinite Accelerator WordPress plugin (versions before 2.29.24 ) is vulnerable to a denial of service (DoS) attack due to a missing capability check on a state-update AJAX action. This flaw allows authenticated users, such as subscribers , to submit a malformed value that triggers an uncau...

CVE-2026-87828: Uncontrolled Resource Consumption

The Seraphinite Accelerator WordPress plugin before 2.29.24 does not perform a capability check on one of its state-update AJAX actions, allowing authenticated users such as subscribers to write a malformed value that causes an uncaught error on every subsequent admin page load, making the entire...

PT-2026-93308

The Seraphinite Accelerator WordPress plugin before 2.29.24 does not perform a capability check on one of its state-update AJAX actions, allowing authenticated users such as subscribers to write a malformed value that causes an uncaught error on every subsequent admin page load, making the entire...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: mm: Do not attempt to NUMA-migrate COW pages that have other uses. Oded Gabbay reported that enabling NUMA balancing causes corruption in his Gaudi accelerator test. He described the situation as follows: “All the details are in...

CVE-2026-89591

In the Linux kernel, the following vulnerability has been resolved: accel/rocket: initialize job domain before cleanup paths rocketioctlsubmitjob releases rjob through rocketjobput on allocation error paths. rocketjobcleanup unconditionally calls rocketiommudomainputjob-domain, but job-domain is...