CVE-2026-64306

The CVE-2026-64306 issue affects the Linux kernel crypto DRBG (CTR_DRBG). The root cause is in drbg_ctr_generate(), which could return success after a failure, leaving the output buffer uninitialized. This vulnerability is addressed by the kernel fix that prevents returning success on failure and...

CVE-2025-38054

In the Linux kernel, the following vulnerability has been resolved: ptp: ocp: Limit signal/freq counts in summary output functions The debugfs summary output could access uninitialized elements in the freqin and signalout arrays, causing NULL pointer dereferences and triggering a kernel Oops...