PT-2026-86168

Name of the Vulnerable Software and Affected Versions PJSIP versions prior to commit a1b707c Description A stack buffer overflow occurs in the SRTP/SDES media transport when processing a=crypto attributes during the Session Description Protocol SDP offer/answer process. The issue resides in the...

PT-2026-91342

In the Linux kernel, the following vulnerability has been resolved: crypto: sun8i-ss - Remove crypto rng interface Since the crypto rng interface for hardware PRNGs is unused and is redundant with hwrng and the actual Linux RNG, it's being phased out. Most drivers for it were already removed. Go...

Linux Distros Unpatched Vulnerability : CVE-2026-80836

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - crypto: virtio - bound the akcipher result length virtiocryptodataqakciphercallback sets the result length from the device-reported response length without...

Linux Distros Unpatched Vulnerability : CVE-2026-80831

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - crypto: mxs-dcp - fix source scatterlist length access mxsdcpaesblockcrypt uses sgdmalen without mapping the source scatterlist with dmamapsg first. Therefore,...

CVE-2026-80836: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: crypto: virtio - bound the akcipher result length virtiocryptodataqakciphercallback sets the result length from the device-reported response length without bounding it to the destination buffer, which was allocated for the origin...

The vulnerability of the qp_send_message() function in the drivers/crypto/hisilicon/sec2/sec_crypto.c file of the Linux kernel cryptographic accelerator driver allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the qpsendmessage function in the drivers/crypto/hisilicon/sec2/seccrypto.c file of the Linux kernel cryptographic accelerator driver relates to the dereferencing of a pointer with an expired validity period. Exploiting this vulnerability could allow a remote attacker to...

Linux Distros Unpatched Vulnerability : CVE-2026-80832

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - crypto: qce - fix CCM AAD buffer underallocation The AAD buffer allocated in qceaeadccmpreparebufassoclen can be smaller than the length later programmed into t...

The vulnerability of the af_alg_cmsg_send() function in the crypto/af_alg.c module of the Linux kernel’s cryptographic subsystem allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the afalgcmsgsend function in the crypto/afalg.c module of the Linux kernel’s cryptographic subsystem is related to integer overflow or cyclic shift vulnerabilities. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

PT-2026-91335

In the Linux kernel, the following vulnerability has been resolved: crypto: virtio - bound the akcipher result length virtio crypto dataq akcipher callback sets the result length from the device-reported response length without bounding it to the destination buffer, which was allocated for the...

PT-2026-85801

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the tegra crypto component where the system fails to return an ENOMEM error value when the input buffer allocation fails within the tegra ccm do one req function...

Linux Distros Unpatched Vulnerability : CVE-2026-80833

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - crypto: sun8i-ss - Remove cryptorng interface Since the cryptorng interface for hardware PRNGs is unused and is redundant with hwrng and the actual Linux RNG,...

MiracleLinux 9 : kernel-5.14.0-687.29.1.el9_8 (AXSA:2026-1758:73)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1758:73 advisory. kernel: crypto: afalg - zero initialize memory allocated via sockkmalloc CVE-2025-71113 kernel: scsi: core: Wake up the error handler when final...

PT-2026-85713

In the Linux kernel, the following vulnerability has been resolved: crypto: qcom-rng - Remove crypto rng interface qcom-rng.c exposes the same hardware through two completely separate interfaces, crypto rng and hwrng. However, the implementation of this is buggy because it permits generation...

PT-2026-85711

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The sun8i-ss driver within the crypto subsystem contains a use-after-free issue in the generate function. This occurs because wait for completion interruptible timeout is used without...

PT-2026-85712

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the sun8i-ce driver within the crypto rng interface. The generate function fails to properly shut down the DMA operation when a signal is sent while usin...

PT-2026-85710

In the Linux kernel, the following vulnerability has been resolved: crypto: qce - fix CCM AAD buffer underallocation The AAD buffer allocated in qce aead ccm prepare buf assoclen can be smaller than the length later programmed into the DMA scatterlist. The allocation size is currently calculated...

PT-2026-85714

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds read exists in the virtio crypto dataq akcipher callback function. The issue occurs because the function sets the result length based on the device-reported response...

crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages

A flaw was found in the crypto/tls package, part of golang. A malicious client can exploit this vulnerability by continuously sending KeyUpdate messages to a server. This forces the server to perform indefinite key derivation operations, leading to resource exhaustion and a Denial of Service DoS...

crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages

A flaw was found in the crypto/tls package, part of golang. A malicious client can exploit this vulnerability by continuously sending KeyUpdate messages to a server. This forces the server to perform indefinite key derivation operations, leading to resource exhaustion and a Denial of Service DoS...

crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption

A flaw was found in the crypto/tls component. This vulnerability occurs during Transport Layer Security TLS session resumption when certificate authority CA settings are modified between the initial and resumed handshakes. An attacker could exploit this to bypass certificate validation, allowing ...