Nixos Nixos vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Nixos Nixos: 2 record(s), with affected versions and fixes.cpe:2.3:o:nixos:nixos
CVE-2026-31431
High · 7.8
KEV Urgent · 72 Public exploit CWE-669 Apr 22, 2026
Linux Kernel Incorrect Resource Transfer Between Spheres Vulnerability
In the Linux kernel, the following vulnerability has been resolved:
crypto: algif_aead - Revert to operating out-of-place
This mostly reverts commit 72548b093ee3 except for the copying of
the associated data.
There is no benefit in operating in-place in algif_aead since the
source and destination come from different mappings. Get rid of
all the complexity added for in-place operation and just copy the
AD directly.
CVE-2024-12085
High · 7.5
CWE-908 Jan 14, 2025
Rsync: info leak via uninitialized stack contents
A flaw was found in rsync which could be triggered when rsync compares file checksums. This flaw allows an attacker to manipulate the checksum length (s2length) to cause a comparison between a checksum and uninitialized memory and leak one byte of uninitialized stack data at a time.