CVE-2026-80550

In the Linux kernel, the following vulnerability has been resolved: s390/vfioccw: Fix out of bounds check on CCW array The routine ccwchaincalclength counts the number of channel command words CCWs that are chained together in a single channel program, and rejects anything larger than...

CVE-2026-80550

CVE-2026-80550 is an out-of-bounds read in the Linux kernel s390/vfio_ccw driver. The function ccwchain_calc_length() iterates over chained channel command words (CCWs) with a do..while (count

PT-2026-82166

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds check exists in the ccwchain calc length function. This routine counts the number of channel command words CCWs chained together in a single channel program and is...

DiagChain: A Diagnostic Benchmark for Evaluating LLM Agents on Evidence-Grounded Attack Chain Reconstruction

Large Language Model LLM agents offer a promising approach to attack chain reconstruction by retrieving and interpreting heterogeneous telemetry to infer ordered attacker actions. However, existing benchmarks mainly evaluate final outputs or aggregate accuracy, providing limited insight into how...

CVE-2026-33307

Modgnutls is a TLS module for Apache HTTPD based on GnuTLS. In versions prior to 0.12.3 and 0.13.0, code for client certificate verification imported the certificate chain sent by the client into a fixed size gnutlsx509crtt x509 array without checking the number of certificates is less than or...

mod_gnutls security vulnerability

modgnutls is a TLS module for Apache HTTPD based on GnuTLS. Versions of modgnutls prior to 0.12.3 and 0.13.0 have security vulnerabilities. These vulnerabilities stem from the fact that client certificate verification does not check the length of the certificate chain, which may lead to...

CVE-2022-3616: Improper Check for Unusual or Exceptional Conditions

Attackers can create long chains of CAs that would lead to OctoRPKI exceeding its max iterations parameter. In consequence it would cause the program to crash, preventing it from finishing the validation and leading to a denial of service. Credits to Donika Mirdita and Haya Shulman - Fraunhofer...

CVE-2021-35078

Possible memory leak due to improper validation of certificate chain length while parsing server certificate chain in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables...

Veeam Backup & Replication support for HPE Cloud Volumes Backup

Veeam Backup & Replication v10 provides official support for HPE Cloud Volumes Backup. HPE Cloud Volumes Backup is a cloud-based backup service from HPE that emulates on-premises StoreOnce Catalyst Stores and can be used by Veeam Backup & Replication as a backup target that will automatically pro...

PT-2017-13212

Name of the Vulnerable Software and Affected Versions mbed TLS versions prior to 1.3.21 mbed TLS versions 2.x prior to 2.1.9 Description The issue allows remote attackers to bypass peer authentication via an X.509 certificate chain with many intermediates, but only if optional authentication is...