Lucene search
K

9053 matches found

CNNVD
CNNVD
added 2026/01/05 12:0 a.m.5 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from an improper order of work queue initialization in netpoll, which could result in a kernel warning...

6.2AI score0.00155EPSS
Exploits0References5
Tenable Nessus
Tenable Nessus
added 2026/01/05 12:0 a.m.3 views

Linux Distros Unpatched Vulnerability : CVE-2023-54167

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - m68k: mm: Move initrd phystovirt handling after paginginit When booting with an initial ramdisk on platforms where physical memory does not start at address zer...

5.3AI score0.00166EPSS
Exploits0References2
NVD
NVD
added 2026/01/02 7:15 p.m.2 views

CVE-2026-21444

libtpms, a library that provides software emulation of a Trusted Platform Module, has a flaw in versions 0.10.0 and 0.10.1. The commonly used integration of libtpms with OpenSSL 3.x contained a vulnerability related to the returned IV initialization vector when certain symmetric ciphers were used...

5.5CVSS0.0007EPSS
Exploits1References3
EUVD
EUVD
added 2026/01/02 7:5 p.m.6 views

EUVD-2026-0753

libtpms, a library that provides software emulation of a Trusted Platform Module, has a flaw in versions 0.10.0 and 0.10.1. The commonly used integration of libtpms with OpenSSL 3.x contained a vulnerability related to the returned IV initialization vector when certain symmetric ciphers were used...

5.5CVSS6.3AI score0.0007EPSS
Exploits1References3
Vulnrichment
Vulnrichment
added 2026/01/02 7:5 p.m.1 views

CVE-2026-21444 libtpms returns wrong initialization vector when certain symmetric ciphers are used

libtpms, a library that provides software emulation of a Trusted Platform Module, has a flaw in versions 0.10.0 and 0.10.1. The commonly used integration of libtpms with OpenSSL 3.x contained a vulnerability related to the returned IV initialization vector when certain symmetric ciphers were used...

5.5CVSS6.5AI score0.0007EPSS
Exploits1References3
Debian CVE
Debian CVE
added 2026/01/02 7:5 p.m.5 views

CVE-2026-21444

libtpms, a library that provides software emulation of a Trusted Platform Module, has a flaw in versions 0.10.0 and 0.10.1. The commonly used integration of libtpms with OpenSSL 3.x contained a vulnerability related to the returned IV initialization vector when certain symmetric ciphers were used...

5.5CVSS5.4AI score0.0007EPSS
Exploits1
CNNVD
CNNVD
added 2026/01/02 12:0 a.m.7 views

libtpms 安全特征问题漏洞

libtpms is a software emulation of a Trusted Platform module by the individual developer Stefan Berger. A security signature issue vulnerability exists in libtpms versions 0.10.0 and 0.10.1, which stems from improperly returning initialization vectors, which could weaken subsequent encryption and...

5.5CVSS6.4AI score0.0007EPSS
Exploits1References3
Positive Technologies
Positive Technologies
added 2026/01/02 12:0 a.m.6 views

PT-2026-1122

Name of the Vulnerable Software and Affected Versions libtpms versions 0.10.0 through 0.10.1 Description libtpms, a library providing software emulation of a Trusted Platform Module, contains a flaw impacting data confidentiality. When integrated with OpenSSL 3.x, the library incorrectly returns...

5.5CVSS6.7AI score0.0007EPSS
Exploits1References22
Tenable Nessus
Tenable Nessus
added 2026/01/02 12:0 a.m.3 views

Linux Distros Unpatched Vulnerability : CVE-2026-21444

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libtpms, a library that provides software emulation of a Trusted Platform Module, has a flaw in versions 0.10.0 and 0.10.1. The commonly used integration of...

5.5CVSS5.5AI score0.0007EPSS
Exploits1References2
OSSF Malicious Packages
OSSF Malicious Packages
added 2026/01/01 10:8 p.m.7 views

Malicious code in ziphash (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 e9a36a54bad10e0f086740a84fd0a837dd4bf1cc9c3c0707648af4bb3855a03e During initialization of the archive-support class, the package starts code from another file and downloads multi-stage malware --- Category: MALICIOUS - The...

7.3AI score
Exploits0References4
OSV
OSV
added 2026/01/01 10:8 p.m.4 views

MAL-2026-6 Malicious code in ziphash (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 e9a36a54bad10e0f086740a84fd0a837dd4bf1cc9c3c0707648af4bb3855a03e During initialization of the archive-support class, the package starts code from another file and downloads multi-stage malware --- Category: MALICIOUS - The...

7.2AI score
Exploits0References4
OSV
OSV
added 2026/01/01 1:54 p.m.2 views

SUSE-RU-2026:20056-1 Recommended update for shim

This update for shim fixes the following issues: This update for shim fixes the following issues: shim is updated to version 16.1: - shimstartimage: fix guid/handle pairing when uninstalling protocols - Fix uncompressed ipv6 netboot - fix test segfaults caused by uninitialized memory -...

6.7CVSS6.7AI score0.00378EPSS
Exploits1References6
Fedora
Fedora
added 2026/01/01 1:8 a.m.3 views

[SECURITY] Fedora 42 Update: golang-github-google-wire-0.6.0-14.fc42

Wire is a code generation tool that automates connecting components using dependency injection. Dependencies between components are represented in Wire as function parameters, encouraging explicit initialization instead of global variables. Because Wire operates without runtime state or reflectio...

6.5CVSS7.2AI score0.00489EPSS
Exploits1
Positive Technologies
Positive Technologies
added 2026/01/01 12:0 a.m.3 views

PT-2026-27647

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the SMB2 implementation of the Linux kernel where uninitialized variables within the smb2 unlink function can lead to system crashes oops. Specifically, if SMB2 open ini...

5.5CVSS5.8AI score0.00121EPSS
Exploits0References15
Positive Technologies
Positive Technologies
added 2026/01/01 12:0 a.m.9 views

PT-2026-27717

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains an issue related to the freeing of EFI boot services memory. The efi free boot services function incorrectly uses memblock free late to free memory reserved wit...

5.5CVSS5.8AI score0.00125EPSS
Exploits0References167
Positive Technologies
Positive Technologies
added 2026/01/01 12:0 a.m.3 views

PT-2026-26123

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A page array leak existed in the io uring/zcrx functionality of the Linux kernel. A previous fix addressed a page leakage issue but failed to release the associated page array, leading t...

5.5CVSS5.8AI score0.001EPSS
Exploits0References16
Positive Technologies
Positive Technologies
added 2026/01/01 12:0 a.m.5 views

PT-2026-6146

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The ctxfi driver in the Linux kernel contains a flaw in the audio mixer handling code. The conf field, used as a loop index, is not properly initialized, leading to potential out-of-boun...

7.1CVSS6.5AI score0.00126EPSS
Exploits0
Positive Technologies
Positive Technologies
added 2026/01/01 12:0 a.m.4 views

PT-2026-6111

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.19-rc3 Description The Broadcom network driver in the Linux kernel contains a flaw related to PTP Precision Time Protocol handling. Specifically, a NULL pointer dereference can occur in the bnxt ptp enable...

5.3AI score0.00145EPSS
Exploits0References7
Positive Technologies
Positive Technologies
added 2026/01/01 12:0 a.m.7 views

PT-2026-8135

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw in the bpf subsystem, specifically within the test run functionality. A failure to properly account for the size of the xdp frame structure when...

5.5CVSS5.8AI score0.00122EPSS
Exploits0
Positive Technologies
Positive Technologies
added 2026/01/01 12:0 a.m.4 views

PT-2026-8116

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw within the interconnect component related to debugfs handling. Specifically, the src node and dst node variables were not initialized before being used...

5.5CVSS6AI score0.00119EPSS
Exploits0
Rows per page
Query Builder