Lucene search
+L

6 matches found

Redos
Redos
•added 2026/09/22 12:00 a.m.•11 views

ROS-20260922-73-0101

The vulnerability of the ccpaescomplete function in the drivers/crypto/ccp/ccp-crypto-aes.c module of the Linux kernel is related to the copying of buffers without checking the input data. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

7.8CVSS6.8AI score0.0014EPSS
SaveExploits0
RedHat Linux
RedHat Linux
•added 2026/09/16 1:06 a.m.•22 views

kernel: crypto: ccp - copy IV using skcipher ivsize

A flaw was found in the Linux kernel's cryptographic coprocessor CCP driver. When processing AFALG rfc3686-ctr-aes-ccp requests, the ccpaescomplete function attempts to restore more data than the allocated buffer for the Initialization Vector IV can hold. This leads to a buffer overrun, which can...

7.8CVSS6.1AI score0.0014EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
•added 2026/09/04 12:00 a.m.•10 views

Linux kernel Heap Buffer Overflow DoS

The vulnerability of the ccpaescomplete function in the drivers/crypto/ccp/ccp-crypto-aes.c module of the Linux kernel is related to the copying of buffers without checking the input data. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

7.8CVSS6.7AI score0.0014EPSS
SaveExploits0References16Affected Software4
RedHat Linux
RedHat Linux
•added 2026/08/25 5:53 p.m.•23 views

kernel: crypto: ccp - copy IV using skcipher ivsize

A flaw was found in the Linux kernel's cryptographic coprocessor CCP driver. When processing AFALG rfc3686-ctr-aes-ccp requests, the ccpaescomplete function attempts to restore more data than the allocated buffer for the Initialization Vector IV can hold. This leads to a buffer overrun, which can...

7.8CVSS6.1AI score0.0014EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
•added 2026/08/25 3:23 p.m.•13 views

kernel: crypto: ccp - copy IV using skcipher ivsize

A flaw was found in the Linux kernel's cryptographic coprocessor CCP driver. When processing AFALG rfc3686-ctr-aes-ccp requests, the ccpaescomplete function attempts to restore more data than the allocated buffer for the Initialization Vector IV can hold. This leads to a buffer overrun, which can...

7.8CVSS6.1AI score0.0014EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/06/24 12:00 a.m.•3 views

CVE-2026-53016: Out-of-bounds Write

In the Linux kernel, the following vulnerability has been resolved: crypto: ccp - copy IV using skcipher ivsize AFALG rfc3686-ctr-aes-ccp requests pass an 8-byte IV to the driver. ccpaescomplete restores AESBLOCKSIZE bytes into the caller's IV buffer while RFC3686 skciphers expose an 8-byte IV, s...

7.8CVSS5.7AI score0.0014EPSS
SaveExploits0References16
Rows per page
Query Builder