Lucene search
K

8 matches found

AstraLinux
AstraLinux
added 2026/05/20 5:53 a.m.2 views

Astra Linux - уязвимость в linux-5.10

In the Linux kernel, the following vulnerability has been resolved: tls: Purging the asynchold element from tlsdecryptwait The asynchold queue retains encrypted input data while the AEAD engine references their scatterlist data. Once tlsdecryptwait returns, every AEAD operation is completed, and...

7.5CVSS5.6AI score0.00045EPSS
Exploits0References1
Microsoft CVE
Microsoft CVE
added 2026/04/26 8:5 a.m.1 views

tls: Purge async_hold in tls_decrypt_async_wait()

...

7.5CVSS5.2AI score0.00045EPSS
Exploits0
Tenable Nessus
Tenable Nessus
added 2026/04/03 12:0 a.m.2 views

Linux Distros Unpatched Vulnerability : CVE-2026-23414

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - tls: Purge asynchold in tlsdecryptasyncwait The asynchold queue pins encrypted input skbs while the AEAD engine references their scatterlist data. Once...

7.5CVSS6.9AI score0.00045EPSS
Exploits0References3
NVD
NVD
added 2026/04/02 12:16 p.m.2 views

CVE-2026-23414

In the Linux kernel, the following vulnerability has been resolved: tls: Purge asynchold in tlsdecryptasyncwait The asynchold queue pins encrypted input skbs while the AEAD engine references their scatterlist data. Once tlsdecryptasyncwait returns, every AEAD operation has completed and the engin...

7.5CVSS0.00045EPSS
Exploits0References6
OSV
OSV
added 2026/04/02 12:16 p.m.1 views

UBUNTU-CVE-2026-23414

In the Linux kernel, the following vulnerability has been resolved: tls: Purge asynchold in tlsdecryptasyncwait The asynchold queue pins encrypted input skbs while the AEAD engine references their scatterlist data. Once tlsdecryptasyncwait returns, every AEAD operation has completed and the engin...

7.5CVSS5.6AI score0.00045EPSS
Exploits0References3
CVE
CVE
added 2026/04/02 11:40 a.m.8 views

CVE-2026-23414

CVE-2026-23414 is addressed in the Linux kernel TLS code. The vulnerability involved the async_hold queue that pins encrypted input skbs while AEAD operations reference scatterlist data. The fix centralizes purge of async_hold in tls_decrypt_async_wait(), ensuring all callers (recvmsg drain path,...

7.5CVSS5.6AI score0.00045EPSS
Exploits0References6Affected Software1
Positive Technologies
Positive Technologies
added 2026/04/02 12:0 a.m.1 views

PT-2026-29721

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw related to the handling of asynchronous decryption within the TLS Transport Layer Security protocol. Specifically, the async hold queue, used to manage...

7.8CVSS5.8AI score0.00045EPSS
Exploits0References265
CNNVD
CNNVD
added 2026/04/02 12:0 a.m.2 views

Linux kernel 安全漏洞

The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from the tls asynchold queue not being cleared in time, potentially leading to memory leaks...

7.5CVSS7AI score0.00045EPSS
Exploits0References5
Rows per page
Query Builder