CVE-2026-102824

A flaw was found in russh. The library fails to validate peer public keys during hybrid cryptographic key exchange, accepting an all-zero key. A remote attacker acting as a malicious Secure Shell SSH peer can exploit this flaw during connection negotiation to force the classical encryption...

CVE-2026-102824 Russh: Missing X25519 zero-point validation in hybrid ML-KEM key exchange

Russh is a Rust SSH client and server library. Prior to 0.63.0, the hybrid ML-KEM 768 and X25519 implementation in russh/src/kex/hybridmlkem.rs accepts an all-zero 32-byte peer X25519 public key in both serverdh and computesharedsecret, forcing the X25519 contribution to the combined shared secre...

CVE-2026-102824 Russh: Missing X25519 zero-point validation in hybrid ML-KEM key exchange

Russh is a Rust SSH client and server library. Prior to 0.63.0, the hybrid ML-KEM 768 and X25519 implementation in russh/src/kex/hybridmlkem.rs accepts an all-zero 32-byte peer X25519 public key in both serverdh and computesharedsecret, forcing the X25519 contribution to the combined shared secre...

CVE-2026-102824

The Russh Rust SSH client and server library (prior to version 0.63.0 ) contains a vulnerability in the hybrid ML-KEM 768 and X25519 key exchange implementation. The root cause is a missing zero-point validation in russh/src/kex/hybrid_mlkem.rs, which allows the library to accept an all-zero 32-b...

CVE-2026-102729

gxbinresthemeload sizes its theme buffer for the theme it was asked for, and allocates it even when the resource holds no theme with that id. A theme id at or past the theme count declared by the resource gets a buffer of zero bytes. The load pass then walks past the end of the theme table, takes...

CVE-2026-102729

gxbinresthemeload sizes its theme buffer for the theme it was asked for, and allocates it even when the resource holds no theme with that id. A theme id at or past the theme count declared by the resource gets a buffer of zero bytes. The load pass then walks past the end of the theme table, takes...

OPENSUSE-SU-2026:21973-1 Security update for ImageMagick

This update for ImageMagick fixes the following issues: - CVE-2026-93586: use-after-free in the ImagesToBlob method can lead to a process crash bsc1281912. - CVE-2026-93587: policy bypass in the PCD, CUBE and HALD coders can lead to extra memory allocation and a denial of service bsc1281909. -...

CVE-2026-97578

A flaw was found in the Linux kernel's Verisilicon Rockchip AV1 video decoder driver. A local user could exploit this vulnerability by submitting a specially crafted video stream with invalid tile parameters. This flaw can trigger a division-by-zero error or an out-of-bounds write to memory,...

Important: libpcap

Issue Overview: In BPF instructions that load/store a value from/to a scratch memory register the register index is an unsigned 32-bit integer and must not exceed 15, but libpcap BPF interpreter does not validate the value. In particular uncommon use cases a crafted filter program can cause the...

Amazon Linux 2 : libpcap (ALAS-2026-3927)

The version of libpcap installed on the remote host is prior to 1.5.3-11. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3927 advisory. In BPF instructions that load/store a value from/to a scratch memory register the register index is an unsigned 32-bit...

PT-2026-109354

io/channel-socket: do not treat a zero length write as an error...

Amazon Linux 2023 : cjose, cjose-devel (ALAS2023-2026-3130)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3130 advisory. OpenIDC/cjose is a C library implementing the Javascript Object Signing and Encryption JOSE. Prior to version 0.6.2.5, cjose's JWE decryption path for the AES Key Wrap key-management algorithm...

SUSE CVE-2026-97970

In the Linux kernel, the following vulnerability has been resolved: watchdog: msc313e: Avoid division by zero clkgetrate could return 0. Avoid a division by zero panic...

CVE-2026-97523

A flaw was found in the Linux kernel's MultiPath TCP MPTCP subsystem. A race condition between the packet scheduler and socket state transitions can cause the maximum segment size to be reset to zero following a transmission failure. An attacker could exploit this flaw during connection handling ...

A week in security (September 21 – September 27)

Last week on Malwarebytes Labs: LinkedIn adds new checks for fake profiles and work histories Kothamine malware uses Tailscale’s tailcat to evade network detection Criminals turn placeholder domain into ClickFix trap That shipping rebate offer may come with a monthly charge OpenAI agent breached...

Important: libpcap

Issue Overview: In BPF instructions that load/store a value from/to a scratch memory register the register index is an unsigned 32-bit integer and must not exceed 15, but libpcap BPF interpreter does not validate the value. In particular uncommon use cases a crafted filter program can cause the...

ROS-20260928-73-0014

The vulnerability of the kssarnginit function in the drivers/char/hwrandom/ks-sa-rng.c file of the Linux kernel is related to zero-division errors. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

Zero Knowledge Proofs in Quantum Networks

Zero-knowledge proofs ZKPs enable the verification of a statement without revealing any information beyond its validity and constitute a fundamental primitive in cryptography and information theory. However, existing constructions rely on computational assumptions and are predominantly confined t...

ROS-20260928-73-0087

The vulnerability of the iommufd component in the Linux operating system’s kernel is related to the lack of checks for division by zero. Exploiting this vulnerability allows an attacker to cause a service failure...

Warning: Two Unpatched Citrix NetScaler RCE Zero-Days Under Active Exploitation

Two critical vulnerabilities in Citrix NetScaler ADC and NetScaler Gateway that allow remote code execution have been exploited in the wild, Citrix confirmed on September 27. It released fixes for both, along with six other flaws. One of the two affects every deployment on an affected version,...