10 matches found
CVE-2026-64316
A flaw was found in the Linux kernel's crypto: caam module. This vulnerability allows for information disclosure where sensitive cryptographic key material could be leaked at runtime. This occurs when the CONFIGDYNAMICDEBUG option is enabled, due to improper guarding of key dumps in the setkey an...
CVE-2026-64316
In the Linux kernel, the following vulnerability has been resolved: crypto: caam - use printhexdumpdevel to guard key hex dumps Use printhexdumpdevel for dumping sensitive key material in setkey and gensplitkey to avoid leaking secrets at runtime when CONFIGDYNAMICDEBUG is enabled...
UBUNTU-CVE-2026-64316
In the Linux kernel, the following vulnerability has been resolved: crypto: caam - use printhexdumpdevel to guard key hex dumps Use printhexdumpdevel for dumping sensitive key material in setkey and gensplitkey to avoid leaking secrets at runtime when CONFIGDYNAMICDEBUG is enabled...
CVE-2026-64316
This Linux kernel vulnerability affects the crypto: caam (Cellular Acceleration Assurance Module) driver, where the *_setkey() and gen_split_key() functions use print_hex_dump() to output sensitive key material . When CONFIG_DYNAMIC_DEBUG is enabled, this can leak cryptographic secrets at runtime...
EUVD-2026-49028
In the Linux kernel, the following vulnerability has been resolved: crypto: caam - use printhexdumpdevel to guard key hex dumps Use printhexdumpdevel for dumping sensitive key material in setkey and gensplitkey to avoid leaking secrets at runtime when CONFIGDYNAMICDEBUG is enabled...
PT-2026-64537
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description Sensitive key material may be leaked at runtime when CONFIG DYNAMIC DEBUG is enabled. This occurs because the setkey and gen split key functions do not properly guard key hex dumps...
EUVD-2001-0432
Malware in sbrugna...
CVE-2001-0435
The split key mechanism used by PGP 7.0 allows a key share holder to obtain access to the entire key by setting the "Cache passphrase while logged on" option and capturing the passphrases of other share holders as they authenticate...
CVE-2001-0435
The CVE-2001-0435 entry concerns the split key mechanism in PGP 7.0 . The root issue is that a key share holder can obtain access to the entire key by enabling the “Cache passphrase while logged on” option and then capturing the passphrases of other share holders as they authenticate. Documents s...
[wsir-01/02-03] PGP 7.0 Split Key/Cached Passphrase Vulnerability
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 TITLE: PGP 7.0 Split Key/Cached Passphrase Vulnerability ADVISORY ID: WSIR-01/02-03 DISCOVERED BY: Patrik Birgersson, Wkit Security AB CONTACT: [email protected] CLASS: --- OBJECT: PGP Desktop Security 7.0 VENDOR: Network Associates Technology Inc...