15024 matches found
The vulnerability of the parse_longname() function in the fs/ceph/crypto.c module of the distributed file system Ceph’s kernel support for Linux operating systems allows a hacker to cause a service failure.
The vulnerability of the parselongname function in the fs/ceph/crypto.c module, which is part of the Ceph distributed file system support for Linux operating systems, relates to the pointer dereferencing. Exploiting this vulnerability could allow a malicious actor to cause service failures remote...
The vulnerability of the f81604_read_int_callback() function in the drivers/crypto/ccp/sev-dev-tsm.c file of the Linux kernel cryptographic accelerator driver allows a hacker to induce a system failure.
The vulnerability of the f81604readintcallback function in the drivers/crypto/ccp/sev-dev-tsm.c file of the Linux kernel cryptographic accelerator driver is related to errors during link counters updates. Exploiting this vulnerability could allow an attacker to cause a system failure...
The vulnerability of the f81604_read_int_callback() function in the drivers/crypto/ccp/sev-dev-tsm.c file of the Linux kernel cryptographic accelerator driver allows a hacker to induce a system failure.
The vulnerability of the f81604readintcallback function in the drivers/crypto/ccp/sev-dev-tsm.c file of the Linux kernel cryptographic accelerator driver is related to incorrect resource initialization. Exploiting this vulnerability could allow an attacker to cause a system failure...
Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099698)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099698 advisory. In the Linux kernel, the following vulnerability has been resolved: crypto: ecc - Fix carry overflow in vli multiplication The carry flag calculation fails when...
Unity Linux 20.1050e Security Update: kernel (UTSA-2026-100126)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100126 advisory. In the Linux kernel, the following vulnerability has been resolved: net: tls: prevent chain-after-chain in plain text SG Sashiko points out that if end = 0 start != ...
Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100707)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100707 advisory. In the Linux kernel, the following vulnerability has been resolved: crypto: afalg - Cap AEAD AD length to 0x80000000 In order to prevent arithmetic overflows when...
Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099965)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099965 advisory. In the Linux kernel, the following vulnerability has been resolved: crypto: afalg - Cap AEAD AD length to 0x80000000 In order to prevent arithmetic overflows when...
Unity Linux 20.1050e Security Update: kernel (UTSA-2026-100152)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100152 advisory. In the Linux kernel, the following vulnerability has been resolved: crypto: marvell/cesa - Handle zero-length skcipher requests Do not access random memory for...
Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100562)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100562 advisory. In the Linux kernel, the following vulnerability has been resolved: mac802154: llsec: add skbcowdata before in-place crypto llsecdoencryptunauth, llsecdoencryptauth,...
PT-2026-82639
The scalar multiplication includes pre-computed tables for speedup introduced in mirage-crypto-ec 0.11.3. The lookup algorithm for these tables performs secret-dependent reads instead of scanning the entire table. Solution Instead of using the index n - 1, where n is secret-dependent, use i - 1, ...
Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100568)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100568 advisory. In the Linux kernel, the following vulnerability has been resolved: net: tls: prevent chain-after-chain in plain text SG Sashiko points out that if end = 0 start != ...
Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099773)
"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099773 advisory. In the Linux kernel, the following vulnerability has been resolved: smb: client: fix use-after-free in cryptmessage when using async crypto The CVE-2024-50047 fix...
Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099929)
"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099929 advisory. In the Linux kernel, the following vulnerability has been resolved: tipc: fix slab-use-after-free Read in tipcaeaddecryptdone tipcaeaddecrypt goes straight from...
Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100515)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100515 advisory. In the Linux kernel, the following vulnerability has been resolved: crypto: pcrypt - restore callback for non-parallel fallback pcrypt installs pcryptaeaddone on the...
Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099746)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099746 advisory. In the Linux kernel, the following vulnerability has been resolved: crypto: ccp - copy IV using skcipher ivsize AFALG rfc3686-ctr-aes-ccp requests pass an 8-byte IV ...
Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100295)
"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100295 advisory. In the Linux kernel, the following vulnerability has been resolved: smb: client: fix use-after-free in cryptmessage when using async crypto The CVE-2024-50047 fix...
Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100366)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100366 advisory. In the Linux kernel, the following vulnerability has been resolved: crypto: afalg - Disallow concurrent writes in afalgsendmsg Issuing two writes to the same afalg...
CVE-2026-74578
In the Linux kernel, the following vulnerability has been resolved: crypto: algifskcipher - force synchronous processing on trees without ctx-state The AIO/async path in skcipherrecvmsg passes the socket-wide ctx-iv directly into the skcipher request. After iosubmit the socket lock is dropped and...
UBUNTU-CVE-2026-74578
In the Linux kernel, the following vulnerability has been resolved: crypto: algifskcipher - force synchronous processing on trees without ctx-state The AIO/async path in skcipherrecvmsg passes the socket-wide ctx-iv directly into the skcipher request. After iosubmit the socket lock is dropped and...
CVE-2026-74578
CVE-2026-74578 affects the Linux kernel crypto/algif_skcipher path. The AIO/async path in skcipher_recvmsg() could expose an attacker-controlled IV by overwriting ctx->iv via concurrent ALG_SET_IV writes, enabling IV/keystream reuse for CTR/stream modes and potentially plaintext recovery of co...