libssh: Invalid return code for chacha20 poly1305 with OpenSSL backend

A flaw was found in libssh when using the ChaCha20 cipher with the OpenSSL library. If an attacker manages to exhaust the heap space, this error is not detected and may lead to libssh using a partially initialized cipher context. This occurs because the OpenSSL error code returned aliases with th...

CVE-2025-9612

An issue was discovered in the PCI Express PCIe Integrity and Data Encryption IDE specification, where insufficient guidance on Transaction Layer Packet TLP ordering and tag uniqueness may allow encrypted packets to be replayed or reordered without detection. This can enable local or physical...

kernel: wifi: cfg80211: fix use-after-free in cmp_bss()

A use after free vulnerbility exists in the linux kernel wifi module in the cmpbss function,an attacker could create a crafted payload to trigger, leading to damage availability and integrity of the system...

The vulnerability of the FactoryTalk Linx automation system’s software, related to improper handling of user actions, allows a perpetrator to compromise the integrity and accessibility of protected information.

The vulnerability of the FactoryTalk Linx automation system’s software is related to improper handling of user actions. Exploiting this vulnerability can allow attackers to compromise the integrity and accessibility of the protected information...

The vulnerability of the MSTeams plugin for the instant messaging application Mattermost allows a hacker to compromise the integrity and accessibility of protected information.

The vulnerability of the MSTeams plugin for the instant messaging application Mattermost is related to the lack of authentication for a critical function. Exploiting this vulnerability could allow an attacker to compromise the integrity and accessibility of protected information...

The vulnerability of the microprogrammed software of Zyxel ATP, USG FLEX, and USG FLEX 50(W)/USG20(W)-VPN lies in the absence of authentication. This allows attackers to compromise the confidentiality and integrity of the protected information.

The vulnerability of the microprogrammed software in Zyxel ATP, USG FLEX, and USG FLEX 50W/USG20W-VPN devices is related to the absence of authentication. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality and integrity of the protected information...

USN-7934-1: Linux kernel (Azure) vulnerabilities

It was discovered that improper initialization of CPU cache memory could allow a local attacker with hypervisor access to overwrite SEV-SNP guest memory resulting in loss of data integrity. CVE-2024-36331 Jean-Claude Graf, Sandro Rüegge, Ali Hajiabadi, and Kaveh Razavi discovered that the Linux...

The vulnerability of the libwx component in the Linux operating system’s kernel allows a perpetrator to compromise data integrity and cause service failures.

The vulnerability of the libwx component in the Linux operating system’s kernel is related to the lack of initialization for resources. Exploiting this vulnerability allows an attacker to compromise data integrity and cause service failures...

The vulnerability of the appletalk component in the Linux operating system’s kernel allows a perpetrator to compromise data integrity and cause service failures.

The vulnerability of the appletalk component in the Linux operating system’s kernel is related to errors during the update of the link counters. Exploiting this vulnerability allows an attacker to compromise data integrity and cause service failures...

The vulnerability of the drm/xe component in the Linux operating system allows a perpetrator to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the drm/xe component in the Linux operating system is related to the lack of protective measures for the website structure. Exploiting this vulnerability allows attackers to access confidential data, compromise its integrity, and cause service interruptions...

The vulnerability in the lpfc/lpfc_scsi.c component of the Linux operating system allows a hacker to compromise data integrity and cause service failures.

The vulnerability of the lpfc/lpfcscsi.c component in the Linux operating system is related to pointer arithmetic errors. Exploiting this vulnerability allows an attacker to compromise data integrity and cause service failures...

The vulnerability of the fs/btrfs component in the Linux operating system allows a hacker to compromise data integrity and cause service failures.

The vulnerability of the fs/btrfs kernel component in the Linux operating system relates to operations involving resources after their expiration or release. Exploiting this vulnerability allows an attacker to compromise data integrity and cause service failures...

The vulnerability of the IntraService customer interaction system, related to bypassing authentication by using a user-controlled key, allows attackers to influence the integrity of protected information.

The vulnerability of the IntraService customer interaction system relates to the bypassing of authentication procedures by using a key controlled by the user. Exploiting this vulnerability allows a malicious actor to remotely influence the integrity of the protected information...

The vulnerability of Linux Astra Modules’ kernel modules, related to errors in flow blocking, allows a perpetrator to compromise data integrity and cause service failures.

The vulnerability of Linux Astra Modules relates to errors during thread blocking. Exploiting this vulnerability allows an attacker to compromise data integrity and also cause service failures through the use of a specially created file system...

The vulnerability of the Linux operating system’s kernel, related to reading beyond the buffer boundaries of memory, allows an attacker to compromise data integrity and cause service failures.

The vulnerability of the Linux operating system’s kernel is related to reading data beyond the acceptable buffer size. Exploiting this vulnerability allows an attacker to compromise the integrity of data and also cause service failures due to the corrupted image file...

The vulnerability of the net/sched component in the Linux operating system allows a hacker to compromise data integrity and cause service failures.

The vulnerability of the net/sched component in the Linux operating system’s kernel is related to unvalidated array indexing. Exploiting this vulnerability allows an attacker to compromise data integrity and cause service failures...

The vulnerability of the smb component in the Linux operating system’s kernel allows a perpetrator to compromise data integrity and cause service failures.

The vulnerability of the smb component in the Linux operating system’s kernel is related to the dereferencing of a pointer with an expired validity period. Exploiting this vulnerability allows an attacker to compromise data integrity and cause service failures...

The vulnerability of the drivers/net/wireless/ath/ath12k component of the Linux operating system allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the drivers/net/wireless/ath/ath12k component of the Linux operating system is related to reading data from the buffer beyond its allowable limits. Exploiting this vulnerability allows an attacker to access confidential data, compromise its integrity, and cause service failur...

The vulnerability of the jpeg2000dec component in the FFmpeg multimedia library allows a perpetrator to compromise data integrity and cause service failures.

The vulnerability of the jpeg2000dec component in the FFmpeg multimedia library relates to the execution of operations outside the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to compromise data integrity and cause service failures by using a specially creat...

The vulnerability of the hugetlb.c component in the Linux operating system allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the hugetlb.c component in the Linux operating system is related to the disclosure of information. Exploiting this vulnerability allows an attacker to access confidential data, compromise its integrity, and cause service failures...