Lucene search
+L

1 matches found

OSV
OSV
added 2026/08/15 5:55 a.m.33 views

CVE-2026-72330 net/tls: Consume empty data records in tls_sw_read_sock()

In the Linux kernel, the following vulnerability has been resolved: net/tls: Consume empty data records in tlsswreadsock A peer may send a zero-length TLS applicationdata record; TLS 1.3 explicitly permits these as a traffic-analysis countermeasure RFC 8446, Section 5.1. After decryption such a...

7.5CVSS5.6AI score
SaveExploits0References8
Rows per page
Query Builder