Lucene search
+L

3 matches found

osv_cve
osv_cve
•added 2026/09/21 9:16 p.m.•23 views

CVE-2026-15890 AEAD nonce reuse in Zephyr secure_storage ITS default nonce provider due to missing thread synchronization

The default AEAD nonce provider for the PSA Internal Trusted Storage transform module, securestorageitstransformaeadgetnonce in subsys/securestorage/src/its/transform/aeadget.c, stores its nonce counter in unsynchronized function-local static variables snonce and snonceinitialized. Every ITS writ...

5.3CVSS5.8AI score
SaveExploits0References5
Vulnrichment
Vulnrichment
•added 2026/09/21 9:16 p.m.•16 views

CVE-2026-15890 AEAD nonce reuse in Zephyr secure_storage ITS default nonce provider due to missing thread synchronization

The default AEAD nonce provider for the PSA Internal Trusted Storage transform module, securestorageitstransformaeadgetnonce in subsys/securestorage/src/its/transform/aeadget.c, stores its nonce counter in unsynchronized function-local static variables snonce and snonceinitialized. Every ITS writ...

5.3CVSS5.8AI score0.00076EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/09/21 9:16 p.m.•53 views

CVE-2026-15890 AEAD nonce reuse in Zephyr secure_storage ITS default nonce provider due to missing thread synchronization

The default AEAD nonce provider for the PSA Internal Trusted Storage transform module, securestorageitstransformaeadgetnonce in subsys/securestorage/src/its/transform/aeadget.c, stores its nonce counter in unsynchronized function-local static variables snonce and snonceinitialized. Every ITS writ...

5.3CVSS0.00076EPSS
SaveExploits0References2
Rows per page
Query Builder