CVE-2026-80652

In the Linux kernel, the following vulnerability has been resolved: crypto: ccp - Treat zero-length cert chain as query for blob lengths When handling a PDH export, treat a zero-length userspace cert chain buffer as a request to query the length of the relevant blobs. Failure to account for the...

CVE-2026-80652 crypto: ccp - Treat zero-length cert chain as query for blob lengths

In the Linux kernel, the following vulnerability has been resolved: crypto: ccp - Treat zero-length cert chain as query for blob lengths When handling a PDH export, treat a zero-length userspace cert chain buffer as a request to query the length of the relevant blobs. Failure to account for the...

CVE-2026-80652: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: crypto: ccp - Treat zero-length cert chain as query for blob lengths When handling a PDH export, treat a zero-length userspace cert chain buffer as a request to query the length of the relevant blobs. Failure to account for the...

CVE-2025-47378: Exposure of Sensitive System Information to an Unauthorized Control Sphere

Cryptographic Issue when a shared VM reference allows HLOS to boot loader and access cert chain...

PT-2023-18028 · Google · Android

Name of the Vulnerable Software and Affected Versions: InsecureEapNetworkHandler.java affected versions not specified Description: A logic error in the code of InsecureEapNetworkHandler.java, specifically in the isServerCertChainValid function, allows an imposter server to be trusted. This could...