Incorrect Authorization

Overview @openclaw/voice-call is an OpenClaw voice-call plugin Affected versions of this package are vulnerable to Incorrect Authorization via the webhook event deduplication. An attacker can trigger duplicate or stale call-state transitions by replaying Twilio webhook events with randomized even...

UBUNTU-CVE-2024-26935

In the Linux kernel, the following vulnerability has been resolved: scsi: core: Fix unremoved procfs host directory regression Commit fc663711b944 "scsi: core: Remove the /proc/scsi/$procname directory earlier" fixed a bug related to modules loading/unloading, by adding a call to scsiprochostdirr...

CVE-2022-48653

CVE-2022-48653 relates to the Linux kernel ice driver. The vulnerability arises from a double unplug of aux devices in the IDC callback (triggered when aux drivers request a reset and again in ice_prepare_for_reset), causing a scheduling while atomic BUG. The effect is a kernel panic/BUG rather t...