CVE-2026-71225 affecting package libkcapi for versions less than 1.5.1-1

CVE-2026-71225 affecting package libkcapi for versions less than 1.5.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-74578

CVE-2026-74578 affects the Linux kernel crypto/algif_skcipher path. The AIO/async path in skcipher_recvmsg() could expose an attacker-controlled IV by overwriting ctx->iv via concurrent ALG_SET_IV writes, enabling IV/keystream reuse for CTR/stream modes and potentially plaintext recovery of co...

CVE-2026-71226

Memory Corruption via Uncanceled AIO Requests on Error: libkcapi's one-shot AIO path can return an error before all submitted IOCBs are drained, allowing later kernel writes into caller-owned output buffers. Mitigation To mitigate this issue, applications should avoid initializing libkcapi handle...

CVE-2026-64314

The CVE-2026-64314 entry refers to a Linux kernel vulnerability in the crypto/chacha20poly1305 module. The issue arises in chachapoly_create() which may pass a missing poly1305 template argument to a following strcmp() because it does not validate the second template argument. crypto_attr_alg_nam...

crypto: af_alg - Cap AEAD AD length to 0x80000000

...

Ubuntu 22.04 LTS : Linux kernel (Low Latency) vulnerabilities (USN-8351-1)

The remote Ubuntu 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8351-1 advisory. It was discovered that the Linux kernel algifaead module did not properly handle in-place cryptographic operations. This flaw is known as Copy Fail. A...

Exploit for Incorrect Resource Transfer Between Spheres in Linux Linux_Kernel

CVE-2026-31431-CopyFail---Minified-LPE-PoC ⚠️ Disclaimer For...

Exploit for Incorrect Resource Transfer Between Spheres in Linux Linux_Kernel

CVE-2026-31431 "Copy Fail" — Technical Deep Dive Severity:...

SUSE-SU-2026:21520-1 Security update for the Linux Kernel RT (Live Patch 7 for SUSE Linux Enterprise 16)

This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.28.1 fixes various security issues The following security issues were fixed: - CVE-2026-23437: net: shaper: protect late read accesses to the hierarchy bsc1261845. - CVE-2026-31406: xfrm: Fix work re-schedule after cancel in...

SUSE CVE-2026-31739

In the Linux kernel, the following vulnerability has been resolved: crypto: tegra - Add missing CRYPTOALGASYNC The tegra crypto driver failed to set the CRYPTOALGASYNC on its asynchronous algorithms, causing the crypto API to select them for users that request only synchronous algorithms. This...

Exploit for Incorrect Resource Transfer Between Spheres in Linux Linux_Kernel

CopyFail CVE-2026-31431 Overview CopyFail is a proof...

Exploit for CVE-2026-31431

Copy Fail — CVE-2026-31431 CVE-2026-31431 Copy Fail is a lo...

Exploit for CVE-2026-31431

Porting CVE-2026-31431 "Copy Fail" to a Constrained Java Run...

Exploit for CVE-2026-31431

CVE-2026-31431 LPE PoC Rust Implementation This project is...

Exploit for CVE-2026-31431

Author: 0xShe Language / 语言 - English: https://github.com/0xSh...

Exploit for CVE-2026-31431

Copy Fail CVE-2026-31431 – Exploit Usage Guide ⚠️ Discla...

USN-8029-2: Linux kernel vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - MIPS architecture; - Nios II architecture; - PA-RISC architecture; - RISC-V architecture; -...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002089)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002089 advisory. The driverrfc4106decrypt function in arch/x86/crypto/aesni-intelglue.c in the Linux kernel before 3.19.3 does not properly determine the memory locations used for...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002054)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002054 advisory. The crypto API in the Linux kernel through 3.9-rc8 does not initialize certain length variables, which allows local users to obtain sensitive information from kernel...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-000847)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000847 advisory. The driverrfc4106decrypt function in arch/x86/crypto/aesni-intelglue.c in the Linux kernel before 3.19.3 does not properly determine the memory locations used for...