CVE-2026-56898
2026-11-10
20h19 +00:00
20h19 +00:00
指定 CVE 通知
掌握特定 CVE 的任何變更。
CVE 描述
In aes256_cmac_sw of aes.rs, there is a possible way to forge message authentication codes over multi-block messages due to improperly used crypto. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
