CVE Vulnerability Advisory Database

Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.

Reset
Showing 1โ€“2 of 2 advisories (Page 1/1)
CVE-2026-314317.8/HIGHEPSS 98.1%CISA KEV
2026-04-22

Linux Kernel algif_aead In-place Operation Vulnerability Leading to Local Privilege Escalation (CVE-2026-31431)

[Affected Scope] Systems running Linux kernel with the algif_aead crypto subsystem module enabled.

[Impact] A local attacker can exploit this vulnerability to cause kernel memory corruption, potentially leading to local privilege escalation (LPE) to root or system instability (Kernel Panic).

[Mitigation] Apply the latest stable kernel updates from your distribution or disable the algif_aead socket module if not required.

CVE-2025-399645.5/MEDIUMEPSS 1.6%CISA KEV
2025-10-13

Linux Kernel af_alg_sendmsg Race Condition Vulnerability Advisory (CVE-2025-39964)

[Affected Scope] All systems and services utilizing the Linux Kernel Crypto API (AF_ALG) interface.

[Impact] Internal socket state inconsistency and potential Denial of Service (DoS) due to concurrent write operations.

[Mitigation] Update to the latest stable kernel version provided by your distribution and reboot.

CVE Vulnerability Advisory Database (CVSS ยท CISA KEV ยท EPSS) | CVE Pulse