The vulnerability of the si470x_usb_driver_probe() function in the drivers/media/radio/si470x/radio-si470x-usb.c driver for multimedia devices in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the si470xusbdriverprobe function in the drivers/media/radio/si470x/radio-si470x-usb.c driver for multimedia devices in Linux operating systems is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the...

The vulnerability of the btrfs_quota_enable() function in the fs/btrfs/qgroup.c module of the file system Btrfs in the Linux kernel allows a malicious actor to trigger a service failure.

The vulnerability of the btrfsquotaenable function in the fs/btrfs/qgroup.c module of the btrfs file system in Linux kernels is related to the reutilization of previously released memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

Huawei HarmonyOS 安全漏洞

Huawei HarmonyOS is an operating system developed by Chinese company Huawei. It is a full-scenario distributed operating system based on a microkernel architecture. There is a security vulnerability in Huawei HarmonyOS, which stems from a concurrency issue in the graphical module’s reutilization...

The vulnerability of the l2cap_connect_create_rsp() function in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the l2capconnectcreatersp function in the Linux operating system is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected informatio...

The vulnerability of the `sco_sock_kill()` function in the `net/bluetooth/sco.c` module of the Linux kernel’s Bluetooth subsystem allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the scosockkill function in the net/bluetooth/sco.c module of the Linux kernel’s Bluetooth subsystem is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibili...

The vulnerability of the function tcp_fastopen_active_disable_ofo_check() in the net/ipv4/tcp_fastopen.c module, as part of the IPv4 protocol implementation in Linux kernel, allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the function tcpfastopenactivedisableofocheck in the net/ipv4/tcpfastopen.c module, which is part of the IPv4 protocol implementation in Linux kernel, relates to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise...

The vulnerability of the `avs_soc_component_register()` function in the `sound/soc/intel/avs/pcm.c` file, which is part of the Linux SoC audio support module, allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the avssoccomponentregister function in the sound/soc/intel/avs/pcm.c module of the Linux SoC audio support module is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, a...

Nonce Reuse in HPKE Context

The sequence number that is used to compute the AEAD nonce when using a re-usable HPKE context is incremented after each seal or open operation. This sequence number was stored as a u32 and used regular addition on u32 for the increment, meaning in release mode it would silently wrap around to 0...

RUSTSEC-2026-0071 Nonce Reuse in HPKE Context

The sequence number that is used to compute the AEAD nonce when using a re-usable HPKE context is incremented after each seal or open operation. This sequence number was stored as a u32 and used regular addition on u32 for the increment, meaning in release mode it would silently wrap around to 0...

The vulnerability of the tegra_xusb_port_unregister() function in the drivers/phy/tegra/xusb.c module of the Linux kernel driver, which allows a hacker to cause a service failure.

The vulnerability of the tegraxusbportunregister function in the drivers/phy/tegra/xusb.c module of the Linux kernel’s PHY driver is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the `snd_dg00x_stream_init_duplex()` function in the sound subsystem of the Linux operating system’s kernel allows a hacker to cause a service failure.

The vulnerability of the snddg00xstreaminitduplex function in the sound/firewire/digi00x/digi00x-stream.c module of the Linux kernel’s audio subsystem is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to cause a system failure...

CVE-2026-25536

MCP TypeScript SDK is the official TypeScript SDK for Model Context Protocol servers and clients. From version 1.10.0 to 1.25.3, cross-client response data leak when a single McpServer/Server and transport instance is reused across multiple client connections, most commonly in stateless...

CVE-2026-25536 @modelcontextprotocol/sdk has cross-client data leak via shared server/transport instance reuse

MCP TypeScript SDK is the official TypeScript SDK for Model Context Protocol servers and clients. From version 1.10.0 to 1.25.3, cross-client response data leak when a single McpServer/Server and transport instance is reused across multiple client connections, most commonly in stateless...

CVE-2026-25536

CVE-2026-25536 affects the MCP TypeScript SDK. From versions 1.10.0 through 1.25.3, cross‑client data can leak when a single McpServer/Server and transport instance is reused across multiple client connections (notably in stateless StreamableHTTPServerTransport deployments). The issue arises from...

CVE-2026-25536

MCP TypeScript SDK is the official TypeScript SDK for Model Context Protocol servers and clients. From version 1.10.0 to 1.25.3, cross-client response data leak when a single McpServer/Server and transport instance is reused across multiple client connections, most commonly in stateless...

EUVD-2026-5335

MCP TypeScript SDK is the official TypeScript SDK for Model Context Protocol servers and clients. From version 1.10.0 to 1.25.3, cross-client response data leak when a single McpServer/Server and transport instance is reused across multiple client connections, most commonly in stateless...

@modelcontextprotocol/sdk has cross-client data leak via shared server/transport instance reuse

Summary Cross-client data leak via two distinct issues: 1 reusing a single StreamableHTTPServerTransport across multiple client requests, and 2 reusing a single McpServer/Server instance across multiple transports. Both are most common in stateless deployments. Impact This advisory covers two...

CVE-2026-24669

The Open eClass platform formerly known as GUnet eClass is a complete course management system. Prior to version 4.2, an insecure password reset mechanism allows local attackers to reuse a valid password reset token after it has already been used, enabling unauthorized password changes and...

Linux kernel 安全漏洞

The Linux kernel is the kernel used by the Linux operating system developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from improper merging of code. This vulnerability could lead to reusing of code after it has been released...

The vulnerability of the __qediremove() function in the drivers/scsi/qedi/qedi_main.c file of the SCSI device driver, which is part of the Linux operating system, allows a hacker to cause a service failure.

The vulnerability of the qediremove function in the drivers/scsi/qedi/qedimain.c file of the SCSI device driver for the Linux operating system is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to cause a service failure...