CVE-2026-102825

Russh is a Rust SSH client and server library. Prior to 0.62.6, the USERAUTHREQUEST path reached from server::runstream in russh/src/server/encrypted.rs increments self.common.authattempts but never compares it with server::Config.maxauthattempts. An unauthenticated remote client can continue...

CVE-2026-102824

Russh is a Rust SSH client and server library. Prior to 0.63.0, the hybrid ML-KEM 768 and X25519 implementation in russh/src/kex/hybridmlkem.rs accepts an all-zero 32-byte peer X25519 public key in both serverdh and computesharedsecret, forcing the X25519 contribution to the combined shared secre...

xmloxide

xmloxide 一个纯 Rust 实现的 libxml2 —— 开源世界中事实标准的 XML/HTML 解析库。 libxml2 于 2025 年 12 月正式停止维护，并存在已知的安全问题。xmloxide 旨在成为一个内存安全、高性能的替代方案，并通过相同的符合性测试套件。 特性 内存安全 —— 基于竞技场的树结构，公共 API 中零 unsafe 符合标准 —— W3C XML 符合性测试套件 100% 通过率（1727/1727 个适用测试） 错误恢复 —— 解析格式错误的 XML 仍能生成可用的树，与 libxml2 类似 多解析 API —— DOM 树、SAX2...

clr

CLR C omprobador de L ifetimes vida útil y otros R efinement types tipos de refinamiento para Zig Vídeo: https://www.youtube.com/watch?v=mf0WzTOe-40 Patrocinio: https://buymeacoffee.com/dnautics discutir en hn: https://news.ycombinator.com/item?id=42923829 discutir en lobste.rs:...

nano-analyzer

Nano-analyzer Un escáner de vulnerabilidades de día cero mínimo basado en LLM porAISLE. Prototipo de investigación con fines de demostración. Este es un harness simple de un solo archivo que puede detectar vulnerabilidades reales de día cero. Tenga en cuenta que es un prototipo, sesgado hacia...

kernel-c-to-rust-spike

Kernel C-to-Rust hardening spike: UVC descriptor parser Can a security-critical Linux kernel C parser be hardened by rewriting it in Rust, with the rewrite shown equivalent to the original and then formally verified? This spike runs the full loop on one target: the UVC video descriptor parser...

CVE-2026-93266

A flaw was found in the Linux kernel's ARM64 Realm Services Interface RSI component. When copying attestation challenge data into register structures, the kernel performs a write operation across adjacent structure fields, triggering a memory safety warning from the fortified memory copying...

CVE-2015-8710

Reproductor Reconocimiento a Mike Dalessio, Francois Chagnon, Florian Weingarten y Jun Kokatsu. Ver BZ 746048 Compilación en Linux $ cmake ../CVE-2015-8710/ -G "Unix Makefiles" -DLIBXML2LIBRARIES=/path/to/your/library/libxml2.so.2 -DLIBXML2INCLUDEDIR=/path/to/your/sources/libxml2-2.9.1/include/ $...

mlkem-native

mlkem-native mlkem-native is a secure, fast, and portable C90^C90 implementation of ML-KEM^FIPS203. It is a fork of the ML-KEM reference implementation^REF. All C code in mlkem/src/ and mlkem/src/fips202/ is proved memory-safe no memory overflow and type-safe no integer overflow using CBMC^CBMC...

kernel security, bug fix, and enhancement update

An update is available for kernel. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The kernel packages contain the Linux kernel, the core of any Linux operating...

RLSA-2026:71232 Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: block: zero non-PI portion of auto integrity buffer CVE-2026-23007 kernel: afunix: Drop all SCM attributes for SOCKMAP CVE-2026-53005 kernel: mac802154: llsec: add skbcowdata before...

CVE-2026-39113

CVE-2026-39113: Desbordamiento de búfer en el montón en la extensión SQLAR opcional de SQLite Resumen ejecutivo CVE-2026-39113 es un desbordamiento de búfer en el montón en la extensión SQLAR opcional de SQLite. En una aplicación que haya cargado la extensión, un atacante que pueda invocar...

CVE-2026-97618

The Linux kernel contains a vulnerability in the io_uring/net subsystem where a recv/recvmsg operation using MSG_TRUNC causes the system to overconsume buffers. Specifically, if an incoming packet exceeds the provided buffer size, the net layer returns the full packet length instead of the number...

CVE-2026-97541 wifi: ath9k_htc: don't store usb_device_id

In the Linux kernel, the following vulnerability has been resolved: wifi: ath9khtc: don't store usbdeviceid usbdeviceid is not guaranteed to live longer than probe due to presence of dynamic ID. All information apart from driverdata can be easily retrieved from usbdevice, so just store driverdata...

santa

Santa !NOTE As of 2025, Santa is no longer maintained by Google. We encourage existing users to migrate to an actively maintained fork of Santa, such as https://github.com/northpolesec/santa. Santa is a binary and file access authorization system for macOS. It consists of a system extension that...

SUSE CVE-2026-93802

In the Linux kernel, the following vulnerability has been resolved: wifi: rsi: validate beacon length before fixed buffer copy rsipreparebeacon copies the mac80211 beacon frame after FRAMEDESCSZ into a management skb whose usable tailroom may be smaller than MAXMGMTPKTSIZE after alignment. Valida...

CVE-2026-97520

In the Linux kernel, the following vulnerability has been resolved: gfs2: move quotainit qc iterator increment Move qc++ from the loop body into the for-loop increment expression in gfs2quotainit. This keeps iterator progression explicit and avoids mixing pointer advance with duplicate-slot...

CVE-2026-97520

The Linux kernel contains a vulnerability within the gfs2 filesystem component in the gfs2_quota_init() function. The issue is caused by the qc++ iterator increment being located inside the loop body, which can lead to issues by mixing pointer advancement with duplicate-slot handling. To resolve ...

thunderbird: Thunderbird: Memory safety violations via maliciously crafted mail headers

A flaw was found in Thunderbird where a maliciously constructed mail header could lead to ambiguous parsing. This vulnerability could result in multiple mail header fields being incorrectly interpreted as one, or cause memory safety violations. A remote attacker could potentially exploit this to...

CVE-2026-93817: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: perf: Fix addrfilterranges lifetime Lee Jia Jie reported that since event::addrfilterranges is used under RCU, it should be RCU freed...