The vulnerability of the `udmabuf_create()` function in the `drivers/dma-buf/udmabuf.c` file of the Linux kernel allows a hacker to cause a service failure.

The vulnerability of the udmabufcreate function in the drivers/dma-buf/udmabuf.c file of the Linux kernel is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the bcm_qspi_probe() function in the drivers/spi/spi-bcm-qspi.c file of the Linux kernel’s SPI device driver allows a hacker to cause a service failure.

The vulnerability of the bcmqspiprobe function in the drivers/spi/spi-bcm-qspi.c file of the Linux kernel’s SPI device driver relates to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to cause a system failure...

The vulnerability of the blkcg_init_disk() function in the block/blk-cgroup.c module, which supports the Linux kernel’s block-level support, allows a attacker to cause a service failure.

The vulnerability of the blkcginitdisk function in the block/blk-cgroup.c module, which supports the Linux kernel’s block-level support, involves the failure to release resources after their useful life has expired. Exploiting this vulnerability could allow an attacker to cause service failures...

The vulnerability of the io_ring_exit_work() function in the io_uring/io_uring.c module of the Linux kernel’s asynchronous input/output interface allows a hacker to cause a service failure.

The vulnerability of the ioringexitwork function in the iouring/iouring.c module, a component of the Linux kernel’s asynchronous input/output interface, is related to initialization errors. Exploiting this vulnerability could allow an attacker to cause a service failure...

OpenBao 安全漏洞

OpenBao is an open-source sensitive data management software developed by OpenBao. Versions of OpenBao prior to 2.5.2 contained security vulnerabilities. These vulnerabilities were caused by cross-site scripting in the errordescription parameter on the authentication failed page, which could allo...

MyTube 安全漏洞

MyTube is a video self-hosted downloader and player developed by Peifan Li. Versions of MyTube prior to 1.8.72 contained security vulnerabilities. These vulnerabilities allowed unverified attackers to lock out admin and guest accounts due to login failures, potentially leading to denial-of-servic...

WWBN AVideo 安全漏洞

WWBN AVideo is a video platform building system developed by the WWBN team using PHP. Versions of WWBN AVideo prior to 26.0 contained security vulnerabilities. These vulnerabilities stemmed from a lack of ownership checks at the plugin/PlayLists/View/Playlistsschedules/add.json.php endpoint, whic...

Vulnerability of the avc420_yuv_to_rgb() function in the RDP client FreeRDP, allowing a hacker to cause a service failure

The vulnerability of the avc420yuvtorgb function in the RDP client FreeRDP is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to cause service failures...

Vulnerability of the freerdp_image_copy_from_icon_data() function in the RDP client FreeRDP, which allows a hacker to trigger a service failure

The vulnerability of the freerdpimagecopyfromicondata function libfreerdp/codec/color.c in the RDP client FreeRDP arises due to an operation being executed outside the buffer boundaries. Exploiting this vulnerability could allow a malicious actor to cause service failure...

The vulnerability of the Stream_EnsureCapacity() function in the RDP client FreeRDP, which allows a attacker to trigger a service failure

The vulnerability of the StreamEnsureCapacity function in the RDP client FreeRDP is caused by a numerical overflow condition. Exploiting this vulnerability could allow an attacker, operating remotely, to cause service failures...

The vulnerability of the load_fpu_state() function in the arch/s390/kernel/fpu.c module of the S390 platform support for the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the loadfpustate function in the arch/s390/kernel/fpu.c module of the S390 platform support for the Linux operating system is related to deficiencies in handling exceptional conditions. Exploiting this vulnerability could allow an attacker to trigger a service failure...

The vulnerability of the aspeedsocinfo_init() function in the drivers/soc/aspeed/aspeed-socinfo.c module of the Linux operating system’s SOC (on-chip system) kernel driver allows a attacker to cause a service failure.

The vulnerability of the aspeedsocinfoinit function in the drivers/soc/aspeed/aspeed-socinfo.c module of the Linux SOC processor kernel driver is related to improper memory release. Exploiting this vulnerability can allow an attacker to cause a system failure...

The vulnerability of the s3c24xx_serial_getclk() function in the drivers/tty/serial/samsung_tty.c module of the console TTY driver in the Linux kernel’s serial port allows a hacker to cause a service failure.

The vulnerability of the s3c24xxserialgetclk function in the drivers/tty/serial/samsungtty.c module of the console TTY driver in the Linux kernel’s serial port is related to the failure to release resources after their useful life has expired. Exploiting this vulnerability could allow an attacker...

GHSA-55Q8-2GWX-29PC Ella Core Panics during NAS Authentication Response/Failure with missing IEs

Summary Ella Core panics when processing Authentication Response and Authentication Failure NAS message missing IEs. Impact An attacker able to send crafted NAS messages to Ella Core can crash the process, causing service disruption for all connected subscribers. No authentication is required. Fi...

GHSA-6P22-Q7W5-33PG ImageMagick has possible memory leak in ASHLAR coder when action fails

The ASHLAR coder leaks a temporary image when an action fails and that could result to an out of memory...

ImageMagick has possible memory leak in ASHLAR coder when action fails

The ASHLAR coder leaks a temporary image when an action fails and that could result to an out of memory...

How Trump’s Plot to Grab Iran's Nuclear Fuel Would Actually Work

Experts say that an American ground operation targeting nuclear sites in Iran would be incredibly complicated, put troops’ lives at great risk—and might still fail...

CVE-2026-33481

A flaw was found in Syft, a tool for generating Software Bill of Materials SBOM. When Syft scans large or highly compressed archives, it unpacks them into temporary storage. If this process exhausts the temporary storage, Syft fails to properly clean up these files. This can lead to the temporary...

External Control of Critical State Data

Overview openclaw is a 🦞 OpenClaw — Personal AI Assistant Affected versions of this package are vulnerable to External Control of Critical State Data in the CLI routing process after failed service resolution, where Bonjour and DNS-SD TXT metadata could still influence the chosen target. An...

GHSA-RVQR-HRCC-J9VV OpenClaw: Bonjour/DNS-SD TXT metadata steers CLI routing after failed service resolution

Summary Bonjour and DNS-SD TXT metadata could still steer CLI routing even when actual service resolution failed, allowing unresolved hints to influence the chosen target. Affected Packages / Versions - Package: openclaw npm - Affected: = 2026.3.22 - Latest released tag checked: v2026.3.23-2...