Unity Linux 20.1050e Security Update: kernel (UTSA-2026-101991)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101991 advisory. In the Linux kernel, the following vulnerability has been resolved: crypto: ecc - Fix carry overflow in vli multiplication The carry flag calculation fails when...

Linux Distros Unpatched Vulnerability : CVE-2026-74279

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - crypto: cavium/cpt - fix DMA cleanup using wrong loop index The sgcleanup error path used listi instead of listj when unmapping DMA buffers, leaking successfull...

RockyLinux 8 : kernel-rt (RLSA-2026:55765)

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:55765 advisory. kernel: mm/slub: avoid accessing metadata when pointer is invalid in objecterr CVE-2025-39902 kernel: drm/amdkfd: Fix out-of-bounds write in...

kernel: crypto: ccp - copy IV using skcipher ivsize

A flaw was found in the Linux kernel's cryptographic coprocessor CCP driver. When processing AFALG rfc3686-ctr-aes-ccp requests, the ccpaescomplete function attempts to restore more data than the allocated buffer for the Initialization Vector IV can hold. This leads to a buffer overrun, which can...

CVE-2026-74888 openssl_encrypt before 1.4.0 Non-Standard PBKDF2 Key Derivation

opensslencrypt versions before 1.4.0 use a non-standard PBKDF2 key derivation construction with iterations=1 per call in an outer loop, creating a KDF whose security properties have not been formally analyzed. Attackers can exploit this weakened key derivation to more efficiently crack passwords...

CVE-2026-74888

opensslencrypt versions before 1.4.0 use a non-standard PBKDF2 key derivation construction with iterations=1 per call in an outer loop, creating a KDF whose security properties have not been formally analyzed. Attackers can exploit this weakened key derivation to more efficiently crack passwords...

ROOT-APP-NPM-AIKIDO-2026-554041 AIKIDO-2026-554041 in crypto-js - Patched by Root

Root has patched AIKIDO-2026-554041 in the crypto-js package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2023-46233 CVE-2023-46233 in crypto-js - Patched by Root

Root has patched CVE-2023-46233 in the crypto-js package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-71851 CVE-2026-71851 in crypto-js - Patched by Root

Root has patched CVE-2026-71851 in the crypto-js package for Root:npm. Multiple fixed versions available...

OSEC-2026-17 Timing leak in NIST elliptic curves scalar multiplication

The scalar multiplication includes pre-computed tables for speedup introduced in mirage-crypto-ec 0.11.3. The lookup algorithm for these tables performs secret-dependent reads instead of scanning the entire table. Solution Instead of using the index n - 1, where n is secret-dependent, use i - 1, ...

PT-2026-76623

Name of the Vulnerable Software and Affected Versions openssl encrypt versions prior to 1.4.0 Description The software imports Python's non-cryptographic random module, which uses a Mersenne Twister Pseudo-Random Number Generator PRNG, within the openssl encrypt/modules/pqc.py file. While no...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100511)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100511 advisory. In the Linux kernel, the following vulnerability has been resolved: crypto: ecc - Fix carry overflow in vli multiplication The carry flag calculation fails when...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100377)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100377 advisory. In the Linux kernel, the following vulnerability has been resolved: blk-crypto: make blkcryptoevictkey more robust If blkcryptoevictkey sees that the key is still...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100491)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100491 advisory. In the Linux kernel, the following vulnerability has been resolved: crypto: qat - validate RSA CRT component lengths The generic RSA key parser rsahelper.c bounds ea...

PT-2026-82639

The scalar multiplication includes pre-computed tables for speedup introduced in mirage-crypto-ec 0.11.3. The lookup algorithm for these tables performs secret-dependent reads instead of scanning the entire table. Solution Instead of using the index n - 1, where n is secret-dependent, use i - 1, ...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100310)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100310 advisory. In the Linux kernel, the following vulnerability has been resolved: esp: fix skb leak with espintcp and async crypto When the TX queue for espintcp is full,...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100545)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100545 advisory. In the Linux kernel, the following vulnerability has been resolved: crypto: ccp - copy IV using skcipher ivsize AFALG rfc3686-ctr-aes-ccp requests pass an 8-byte IV ...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100537)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100537 advisory. In the Linux kernel, the following vulnerability has been resolved: crypto: caam - use printhexdumpdevel to guard key hex dumps Use printhexdumpdevel for dumping...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100568)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100568 advisory. In the Linux kernel, the following vulnerability has been resolved: net: tls: prevent chain-after-chain in plain text SG Sashiko points out that if end = 0 start != ...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099965)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099965 advisory. In the Linux kernel, the following vulnerability has been resolved: crypto: afalg - Cap AEAD AD length to 0x80000000 In order to prevent arithmetic overflows when...