USN-6893-1: Linux kernel vulnerabilities

It was discovered that a race condition existed in the Bluetooth subsystem in the Linux kernel when modifying certain settings values through debugfs. A privileged local attacker could use this to cause a denial of service. CVE-2024-24857, CVE-2024-24858, CVE-2024-24859 Several security issues we...

Ubuntu 24.04 LTS : Linux kernel vulnerabilities (USN-6893-1)

"The remote Ubuntu 24.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6893-1 advisory. It was discovered that a race condition existed in the Bluetooth subsystem in the Linux kernel when modifying certain settings values through debugfs. A...

Ubuntu 20.04 LTS : Linux kernel (IBM) vulnerabilities (USN-6892-1)

The remote Ubuntu 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6892-1 advisory. It was discovered that the ATA over Ethernet AoE driver in the Linux kernel contained a race condition, leading to a use-after-free vulnerability. An...

USN-6892-1: Linux kernel (IBM) vulnerabilities

It was discovered that the ATA over Ethernet AoE driver in the Linux kernel contained a race condition, leading to a use-after-free vulnerability. An attacker could use this to cause a denial of service or possibly execute arbitrary code. CVE-2023-6270 It was discovered that the Atheros 802.11ac...

Improper Verification Of Cryptographic Signature

electron-updater is vulnerable to Improper Verification of Cryptographic Signature. The vulnerability is caused due to improper handling and comparison of file paths, allowing an attacker to bypass signature verification by exploiting environment variable expansion and tricking the application in...

DEBIAN-CVE-2024-39493

In the Linux kernel, the following vulnerability has been resolved: crypto: qat - Fix ADFDEVRESETSYNC memory leak Using completiondone to determine whether the caller has gone away only works after a complete call. Furthermore it's still possible that the caller has not yet called...

UBUNTU-CVE-2024-39493

In the Linux kernel, the following vulnerability has been resolved: crypto: qat - Fix ADFDEVRESETSYNC memory leak Using completiondone to determine whether the caller has gone away only works after a complete call. Furthermore it's still possible that the caller has not yet called...

CVE-2024-36526

ZKTeco ZKBio CVSecurity v6.1.1 was discovered to contain a hardcoded cryptographic key...

CVE-2024-30098

Windows Cryptographic Services Security Feature Bypass Vulnerability...

CVE-2024-30098

Windows Cryptographic Services Security Feature Bypass Vulnerability...

CVE-2024-30098

CVE-2024-30098 is referenced in multiple October 2025 Windows security updates (KB5066791, KB5066835, KB5066793, KB5066780, KB5066836, etc.). The connected documents describe a cryptographic hardening change: moving RSA-based smart card certificates from Cryptographic Service Provider (CSP) to Ke...

CVE-2024-30098 Windows Cryptographic Services Security Feature Bypass Vulnerability

...

CVE-2024-30098 Windows Cryptographic Services Security Feature Bypass Vulnerability

...

edk2: Use of a Weak PseudoRandom Number Generator

A security flaw has been identified in the cryptographic system of EDK2, the open-source reference implementation of the UEFI specification. This vulnerability enables an unauthorized remote attacker to potentially expose sensitive information...

Windows Cryptographic Services Security Feature Bypass Vulnerability

...

PT-2024-4784 · Microsoft · Windows Enroll Engine +1

Name of the Vulnerable Software and Affected Versions: Windows Enroll Engine affected versions not specified Description: The issue is related to errors in cryptographic signature verification in the Windows Enroll Engine component of Windows operating systems. This allows an attacker to bypass...

CVE-2024-36526

ZKTeco ZKBio CVSecurity v6.1.1 was discovered to contain a hardcoded cryptographic key...

PT-2024-4803

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to a security feature bypass in Windows Cryptographic Services, allowing a remote attacker to bypass security restrictions. The vulnerability is associated with the use...

Microsoft Windows Cryptographic Services Security Vulnerability

Microsoft Windows Cryptographic Services is a cryptographic service provider program from Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows Cryptographic Services. An attacker exploiting this vulnerability could bypass certain features. The following products and...

CVE-2024-36526

ZKTeco ZKBio CVSecurity v6.1.1 is affected by a hardcoded cryptographic key (CVE-2024-36526). The Red Hat advisory and CNNVD entries corroborate the same issue. The vulnerability stems from a hardcoded key in CVSecurity 6.1.1, enabling high-severity impact per CVSS 3.1 (Critical, with high confid...