The vulnerability of the cifs_smb3_do_mount() function in the fs/smb/client/cifsfs.c module, which is part of the SMB client support in Linux kernel, allows a hacker to trigger a service failure.

The vulnerability of the cifssmb3domount function in the fs/smb/client/cifsfs.c module, which is part of the SMB client support in Linux kernel, involves a memory leak. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the dw2102_i2c_transfer() function in the drivers/media/usb/dvb-usb/dw2102.c file of the multimedia device driver for the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the dw2102i2ctransfer function in the drivers/media/usb/dvb-usb/dw2102.c file of the multimedia device driver for the Linux operating system is related to the use of pointers. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the tg_with_in_bps_limit() function in the block/blk-throttle.c module, which supports the block-level kernel support in the Linux operating system, allows a hacker to trigger a service failure.

The vulnerability of the tgwithinbpslimit function in the block/blk-throttle.c module, which supports the block-level kernel in the Linux operating system, is related to integer overflow. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the nl80211_parse_sched_scan() function in the net/wireless/nl80211.c module, which supports wireless communication in Linux kernels, allows a hacker to cause a service failure.

The vulnerability of the nl80211parseschedscan function in the net/wireless/nl80211.c module, which supports wireless communication in Linux kernels, is related to incorrect input validation. Exploiting this vulnerability could allow an attacker to cause service failures...

The vulnerabilities of the functions cdns3_gadget_ep_enable() and cdns3_gadget_ep_dequeue() in the drivers/usb/cdns3/cdns3-gadget.c driver module of the Linux operating system’s USB device drivers allow a malicious actor to cause service failures.

The vulnerability of the cdns3gadgetepenable and cdns3gadgetepdequeue functions in the drivers/usb/cdns3/cdns3-gadget.c driver for USB device drivers in the Linux operating system is related to the use of pointers. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the gsm_send() and gsm_data_kick() functions in the drivers/tty/n_gsm.c module of the TTY console driver for the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the gsmsend and gsmdatakick functions in the drivers/tty/ngsm.c module of the TTY console driver for the Linux operating system is related to mutual blocking of execution threads. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the cifs_readpage_worker() function in the fs/smb/client/file.c module of the SMB client support library in Linux kernel allows a hacker to cause a service failure.

The vulnerability of the cifsreadpageworker function in the fs/smb/client/file.c module of the SMB client support library in Linux kernel involves the occurrence of mutual locking. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the pi_create_file() function in the kernel/printk/index.c module of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the picreatefile function in the kernel/printk/index.c module of the Linux operating system is related to the failure to release resources after their useful lifespan has ended. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the mac80211_hwsim_select_tx_link() function in the drivers/net/wireless/virtual/mac80211_hwsim.c module of the Linux kernel wireless adapter driver allows a hacker to cause a service failure.

The vulnerability of the mac80211hwsimselecttxlink function in the drivers/net/wireless/virtual/mac80211hwsim.c module of the Linux wireless adapter driver framework is related to the use of pointers. Exploiting this vulnerability could allow an attacker to cause a system failure...

The vulnerability of the ext4_xattr inode_get() function in the fs/ext4/xattr.c module of the Ext4 file system in the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the ext4xattr inodeget function in the fs/ext4/xattr.c module of the Ext4 file system in the Linux operating system is related to the execution of a loop with an unreachable exit condition „Infinite loop“. Exploiting this vulnerability could allow an attacker to cause a servi...

The vulnerability of the brcmf_pno_set_random() function in the drivers/net/wireless/broadcom/brcm80211/brcmfmac/pno.c file of the Broadcom wireless adapter driver for the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the brcmfmac/pno.c function in the drivers/net/wireless/broadcom/brcm80211/brcmfmac driver for Broadcom wireless connectivity in the Linux operating system is related to an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a...

CVE-2026-23414

A flaw was found in the Linux kernel's Transport Layer Security TLS subsystem. When processing TLS messages, a memory leak can occur if the tlsstrpmsghold function fails. This failure can lead to socket kernel buffers skbs being added to an internal queue but not properly released, consuming syst...

CVE-2026-23413

A flaw was found in the Linux kernel's clsact qdisc. This use-after-free vulnerability occurs due to an asymmetry in the initialization and destruction rollback process. When a replacement clsact qdisc instance fails during initialization, the destroy callback is triggered without properly...

OpenClaw: Security Scan Failure Does Not Block Plugin Installation (Fail-Open)

Summary Security Scan Failure Does Not Block Plugin Installation Fail-Open Current Maintainer Triage - Status: open - Normalized severity: low - Assessment: Real in shipped v2026.3.28 plugin install flow, but low severity fits because it still requires an operator to choose installation of an...

CVE-2026-34761

CVE-2026-34761 (Ella Core) affects Ella Core (private-network 5G core). Prior to version 1.8.0, the component panics when processing an NGAP handover failure message, which an attacker could trigger by inducing a gNodeB to send such messages, risking a crash and service disruption for all connect...

CVE-2026-34761 Ella Core Panics Upon NGAP handover failure

Ella Core is a 5G core designed for private networks. Prior to version 1.8.0, Ella Core panics when processing a NGAP handover failure message. An attacker able to cause a gNodeB to send NGAP handover failure messages to Ella Core can crash the process, causing service disruption for all connecte...

CVE-2026-34761

Ella Core is a 5G core designed for private networks. Prior to version 1.8.0, Ella Core panics when processing a NGAP handover failure message. An attacker able to cause a gNodeB to send NGAP handover failure messages to Ella Core can crash the process, causing service disruption for all connecte...

CVE-2026-34761 Ella Core Panics Upon NGAP handover failure

Ella Core is a 5G core designed for private networks. Prior to version 1.8.0, Ella Core panics when processing a NGAP handover failure message. An attacker able to cause a gNodeB to send NGAP handover failure messages to Ella Core can crash the process, causing service disruption for all connecte...

CVE-2026-34761 Ella Core Panics Upon NGAP handover failure

Ella Core is a 5G core designed for private networks. Prior to version 1.8.0, Ella Core panics when processing a NGAP handover failure message. An attacker able to cause a gNodeB to send NGAP handover failure messages to Ella Core can crash the process, causing service disruption for all connecte...

GO-2026-4872 Ella Core Panics during NAS Authentication Response/Failure with missing IEs in github.com/ellanetworks/core

Ella Core Panics during NAS Authentication Response/Failure with missing IEs in github.com/ellanetworks/core...