The vulnerability of the __disable_kprobe() function in the kernel/kprobes.c module of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the disablekprobe function in the kernel/kprobes.c module of the Linux operating system is related to the execution of a loop with an unreachable exit condition „Infinite loop“. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

The vulnerability of the cifs_smb3_do_mount() function in the fs/smb/client/cifsfs.c module, which is part of the SMB client support in Linux kernel, allows a hacker to trigger a service failure.

The vulnerability of the cifssmb3domount function in the fs/smb/client/cifsfs.c module, which is part of the SMB client support in Linux kernel, involves a memory leak. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the mac80211_hwsim_select_tx_link() function in the drivers/net/wireless/virtual/mac80211_hwsim.c module of the Linux kernel wireless adapter driver allows a hacker to cause a service failure.

The vulnerability of the mac80211hwsimselecttxlink function in the drivers/net/wireless/virtual/mac80211hwsim.c module of the Linux wireless adapter driver framework is related to the use of pointers. Exploiting this vulnerability could allow an attacker to cause a system failure...

The vulnerability of the dw2102_i2c_transfer() function in the drivers/media/usb/dvb-usb/dw2102.c file of the multimedia device driver for the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the dw2102i2ctransfer function in the drivers/media/usb/dvb-usb/dw2102.c file of the multimedia device driver for the Linux operating system is related to the use of pointers. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the ext4_xattr inode_get() function in the fs/ext4/xattr.c module of the Ext4 file system in the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the ext4xattr inodeget function in the fs/ext4/xattr.c module of the Ext4 file system in the Linux operating system is related to the execution of a loop with an unreachable exit condition „Infinite loop“. Exploiting this vulnerability could allow an attacker to cause a servi...

The vulnerability of the gsm_send() and gsm_data_kick() functions in the drivers/tty/n_gsm.c module of the TTY console driver for the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the gsmsend and gsmdatakick functions in the drivers/tty/ngsm.c module of the TTY console driver for the Linux operating system is related to mutual blocking of execution threads. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability in the function `drcm_client_modeset_probe()` of the `drivers/gpu/drm/drm_client_modeset.c` file, a part of the Direct Rendering Infrastructure (DRI) driver for the Linux operating system, allows a hacker to cause a service failure.

The vulnerability of the drmclientmodesetprobe function in the drivers/gpu/drm/drmclientmodeset.c file of the Direct Rendering Infrastructure DRI driver module in the Linux operating system is related to improper memory release memory leak. Exploiting this vulnerability could allow an attacker to...

The vulnerability of the brcmf_pno_set_random() function in the drivers/net/wireless/broadcom/brcm80211/brcmfmac/pno.c file of the Broadcom wireless adapter driver for the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the brcmfmac/pno.c function in the drivers/net/wireless/broadcom/brcm80211/brcmfmac driver for Broadcom wireless connectivity in the Linux operating system is related to an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a...

The vulnerability of the pi_create_file() function in the kernel/printk/index.c module of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the picreatefile function in the kernel/printk/index.c module of the Linux operating system is related to the failure to release resources after their useful lifespan has ended. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the radeon_cs_parser_init() function in the drivers/gpu/drm/radeon/radeon_cs.c file of the DRI graphics card driver for Linux operating systems allows a hacker to cause a system failure.

The vulnerability of the radeoncsparserinit function in the drivers/gpu/drm/radeon/radeoncs.c file of the Direct Rendering Infrastructure DRI driver for Linux-based graphics cards is related to integer overflow or cyclic shift vulnerabilities. Exploiting this vulnerability can allow an attacker t...

CVE-2026-23414

A flaw was found in the Linux kernel's Transport Layer Security TLS subsystem. When processing TLS messages, a memory leak can occur if the tlsstrpmsghold function fails. This failure can lead to socket kernel buffers skbs being added to an internal queue but not properly released, consuming syst...

CVE-2026-23413

A flaw was found in the Linux kernel's clsact qdisc. This use-after-free vulnerability occurs due to an asymmetry in the initialization and destruction rollback process. When a replacement clsact qdisc instance fails during initialization, the destroy callback is triggered without properly...

OpenClaw: Security Scan Failure Does Not Block Plugin Installation (Fail-Open)

Summary Security Scan Failure Does Not Block Plugin Installation Fail-Open Current Maintainer Triage - Status: open - Normalized severity: low - Assessment: Real in shipped v2026.3.28 plugin install flow, but low severity fits because it still requires an operator to choose installation of an...

CVE-2026-34761

CVE-2026-34761 (Ella Core) affects Ella Core (private-network 5G core). Prior to version 1.8.0, the component panics when processing an NGAP handover failure message, which an attacker could trigger by inducing a gNodeB to send such messages, risking a crash and service disruption for all connect...

CVE-2026-34761 Ella Core Panics Upon NGAP handover failure

Ella Core is a 5G core designed for private networks. Prior to version 1.8.0, Ella Core panics when processing a NGAP handover failure message. An attacker able to cause a gNodeB to send NGAP handover failure messages to Ella Core can crash the process, causing service disruption for all connecte...

CVE-2026-34761 Ella Core Panics Upon NGAP handover failure

Ella Core is a 5G core designed for private networks. Prior to version 1.8.0, Ella Core panics when processing a NGAP handover failure message. An attacker able to cause a gNodeB to send NGAP handover failure messages to Ella Core can crash the process, causing service disruption for all connecte...

CVE-2026-34761 Ella Core Panics Upon NGAP handover failure

Ella Core is a 5G core designed for private networks. Prior to version 1.8.0, Ella Core panics when processing a NGAP handover failure message. An attacker able to cause a gNodeB to send NGAP handover failure messages to Ella Core can crash the process, causing service disruption for all connecte...

CVE-2026-34761

Ella Core is a 5G core designed for private networks. Prior to version 1.8.0, Ella Core panics when processing a NGAP handover failure message. An attacker able to cause a gNodeB to send NGAP handover failure messages to Ella Core can crash the process, causing service disruption for all connecte...

GO-2026-4872 Ella Core Panics during NAS Authentication Response/Failure with missing IEs in github.com/ellanetworks/core

Ella Core Panics during NAS Authentication Response/Failure with missing IEs in github.com/ellanetworks/core...

Improper Handling of Length Parameter Inconsistency

Overview rack is a minimal, modular and adaptable interface for developing web applications in Ruby. By wrapping HTTP requests and responses in the simplest way possible, it unifies and distills the API for web servers, web frameworks, and software in between the so-called middleware into a singl...