Zephyr Project Zephyr race condition vulnerability

Versions Zephyr 4.3.0 through 4.4.2 contain a race condition vulnerability. This issue arises because within the AES driver, specifically in drivers/crypto/cryptoesp32aes.c, the aesbeginsession function executes code outside the aeslock mutex to write global keys and direction registers for the...

AZL-67991 CVE-2024-36909 affecting package kernel 5.15.200.1-1

In the Linux kernel, the following vulnerability has been resolved: Drivers: hv: vmbus: Don't free ring buffers that couldn't be re-encrypted In CoCo VMs it is possible for the untrusted host to cause setmemoryencrypted or setmemorydecrypted to fail such that an error is returned and the resultin...