Logo
Retour à la veille

CVE-2026-80921

Publié : 9 septembre 2026
Modifié : 9 septembre 2026
Lien officiel NVD

Description détaillée

In the Linux kernel, the following vulnerability has been resolved: KVM: s390: vsie: zero stale crypto bits When shadowing crypto access bits from a format0 apcb (crycb 0 or 1), the bits 64..255 are unchanged from whatever is in the vsie page in the crycb and thus in the apcb. This gives a nested guest potential access to a device no longer available. Zero out the remaining bits.

Références et Patchs

https://git.kernel.org/stable/c/087c19cc60a8caa1a08e1e434c8be2caf6c27733https://git.kernel.org/stable/c/29b4f7bc2991313bd3e6f6fb8fdf1b173f086dd6https://git.kernel.org/stable/c/34d5b5b646c91cfb9338d7a12c955a70ffb8c66bhttps://git.kernel.org/stable/c/59d51550b5cb916bda037673a721a404b3b47a0dhttps://git.kernel.org/stable/c/7d23489f51109e3ebba5b5db8c5f0185af7b7fdfhttps://git.kernel.org/stable/c/935eeba276012916c76243e5cbb843efd8fdb75dhttps://git.kernel.org/stable/c/d110b3297f11ef227098b8a82ade2d5f123b7d2fhttps://git.kernel.org/stable/c/d4bcd2df6d0d2af916b4fe1a533958778ea7c45bhttps://git.kernel.org/stable/c/f6079dca67eccb5eabef9f72437948c66dc5131f

Dernières Vulnérabilités

CVE-2026-79323

Information disclosure in the blogComments GraphQL query in Magefan Blog GraphQL for Magento 2 (magefan/module-blog-graph-ql) through 2.2.1 allows remote unauthenticated attackers to obtain blog commenter email addresses and internal customer and admin identifiers via a POST request to /graphql.

VOIR DÉTAILS

CVE-2026-79322

SQL injection in the RelatedProduct block in Mageplaza Blog for Magento 2 (mageplaza/magento-2-blog-extension) through 4.3.2 allows remote unauthenticated attackers to execute arbitrary SQL commands and read arbitrary database contents via the id parameter to /mpblog/post/view.

VOIR DÉTAILS

CVE-2026-61907

An issue was discovered in Cyrus IMAP before 3.12.4. JMAP snooze bypasses the destination-mailbox ACL. An authenticated user with insert permissions on another user's snoozed mailbox could cause insertion of mail to that user's inbox, or any other of their mailboxes whose id was known to the user, despite having no insert permissions to the target mailbox.

VOIR DÉTAILS