CVE-2026-23168

CVE-2026-23168 affects the Linux kernel (example: kernel6.12 lineage and Oracle/Amazon Linux advisories) where a race in the flexible proportions code (fprop_new_period) can cause a sequence counter write under softirq/hardirq interaction, potentially enabling a deadlock in certain writeout paths...

EUVD-2026-5870

In the Linux kernel, the following vulnerability has been resolved: flexproportions: make fpropnewperiod hardirq safe Bernd has reported a lockdep splat from flexible proportions code that is essentially complaining about the following race: runtimersoftirq - we are in softirq context calltimerfn...

CVE-2026-23168 flex_proportions: make fprop_new_period() hardirq safe

In the Linux kernel, the following vulnerability has been resolved: flexproportions: make fpropnewperiod hardirq safe Bernd has reported a lockdep splat from flexible proportions code that is essentially complaining about the following race: runtimersoftirq - we are in softirq context calltimerfn...

GHSA-G433-PQ76-6CMF Bug fixes in hpke-rs, hpke-rs-rust-crypto

We publish a GitHub security advisory for any releases whose CHANGELOG includes bug-fixes, and encourage our users to upgrade. The latest releases of the hpke-rs and hpke-rs-rust-crypto crates contain the following bug-fixes: hpke-rs - 127: Fix KemAlgorithm::TryFrom mapping where 0x004D incorrect...

Bug fixes in hpke-rs, hpke-rs-rust-crypto

We publish a GitHub security advisory for any releases whose CHANGELOG includes bug-fixes, and encourage our users to upgrade. The latest releases of the hpke-rs and hpke-rs-rust-crypto crates contain the following bug-fixes: hpke-rs - 127: Fix KemAlgorithm::TryFrom mapping where 0x004D incorrect...

CVE-2026-26014

A vulnerability has been identified in the Pion DTLS implementation where the use of random nonce generation with AES-GCM ciphers does not adhere to recommended cryptographic practices. Under certain conditions, this may allow remote attackers to more easily derive or reuse encryption...

CVE-2026-26014

Pion DTLS (Go) vulnerability CVE-2026-26014 affects versions v1.0.0–v3.1.0 due to improper nonce generation with AES-GCM ciphers, enabling nonce reuse in a session. This can let remote attackers obtain the authentication key and spoof data. Remedy: upgrade to v3.1.0 or later. The provided documen...

CVE-2026-26014 Pion DTLS uses random nonce generation with AES GCM ciphers risks leaking the authentication key

Pion DTLS is a Go implementation of Datagram Transport Layer Security. Pion DTLS versions v1.0.0 through v3.1.0 use random nonce generation with AES GCM ciphers, which makes it easier for remote attackers to obtain the authentication key and spoof data by leveraging the reuse of a nonce in a...

GHSA-9F3F-WV7R-QC8R Pion DTLS's usage of random nonce generation with AES GCM ciphers risks leaking the authentication key

Impact Pion DTLS versions v1.0.0 through v3.0.10 use random nonce generation with AES GCM ciphers, which makes it easier for remote attackers to obtain the authentication key and spoof data by leveraging the reuse of a nonce in a session and a "forbidden attack". Patches Upgrade to v3.1.1 or late...

Inadequate Encryption Strength

Overview Affected versions of this package are vulnerable to Inadequate Encryption Strength due to the use of the random nonce generation with AES GCM ciphers. An attacker can obtain the authentication key and spoof data by exploiting nonce reuse within a session. Remediation Upgrade...

PT-2026-7719

Name of the Vulnerable Software and Affected Versions Pion DTLS versions 1.0.0 through 3.1.0 Description Pion DTLS, a Go implementation of Datagram Transport Layer Security, is susceptible to an issue where the use of random nonce generation with AES GCM ciphers allows remote attackers to...

The vulnerability of the x86_android_tabletremove() function in the drivers/platform/x86/x86-android-tablets/core.c driver, which is part of the Linux kernel support for X86 devices. This vulnerability allows a attacker to cause a service failure.

The vulnerability of the x86androidtabletremove function in the drivers/platform/x86/x86-android-tablets/core.c driver for supporting Linux kernel devices is related to errors during link counter updates. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the old_deviceless() function in the net/bridge/br_ioctl.c module, a implementation of networking functions in the Linux kernel, allows a attacker to cause a service failure.

The vulnerability of the olddeviceless function in the net/bridge/brioctl.c module, which implements networking functions in the Linux kernel, is related to errors during the update of the reference counter. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the inherit_event() function in the kernel/events/core.c module, which manages kernel events in Linux operating systems, allows a attacker to cause a service failure.

The vulnerability of the inheritevent function in the kernel/events/core.c module, which manages kernel events in Linux operating systems, is related to errors during the update of the reference counter. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the _nfs42 ProcCopyNotify() function in the fs/nfs/nfs42proc.c module, which is part of the NFS client support in Linux kernel, allows a attacker to cause a service failure.

The vulnerability of the nfs42 ProcCopyNotify function in the fs/nfs/nfs42proc.c module, which is part of the NFS client support in Linux kernel, is related to errors during link counter updates. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the exfat_find() function in the fs/exfat/namei.c module of the exFAT file system in Linux’s kernel allows a attacker to cause a service failure.

The vulnerability of the exfatfind function in the fs/exfat/namei.c module of the exFAT file system in Linux operating systems is related to errors during link counter updates. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the target_free_cmd_counter() function in the drivers/target/target_core_transport.c module of the Linux kernel’s TCM driver allows a hacker to cause a service failure.

The vulnerability of the targetfreecmdcounter function in the drivers/target/targetcoretransport.c module of the Linux kernel’s TCM driver is related to the distribution of resources without any restrictions or regulation. Exploiting this vulnerability could allow a perpetrator to cause service...

ROS-20260203-73-0001

A vulnerability in the Linux operating system kernel is related to errors in updating the reference counter. Exploitation of the vulnerability could allow an attacker to cause a denial of service...

CVE-2025-61634

CVE-2025-61634 affects Wikimedia Foundation MediaWiki, involving the includes/Rest/Handler/PageHTMLHandler.Php file. Red Hat notes a remote-exploit possibility that requires user interaction and does not grant privileges, with no explicit confidentiality/integrity/availability guarantee beyond wh...

The vulnerability of the j1939_xtp_rx_rts_sessionactive() function in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the j1939xtprxrtssessionactive function in the operating system is related to errors during the update of the link counter. Exploiting this vulnerability can allow an attacker to cause a service failure...