The vulnerability of the sun4i_can.c component in the Linux operating system allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the sun4ican.c component in the Linux operating system is related to the copying of buffers without checking the input data. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures through t...

The vulnerability of the fs/notify component in Linux operating systems allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the fs/notify component in Linux operating systems is related to pointer arithmetic errors. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and cause service failures...

The vulnerability of the drivers/media/pci/mgb4 component in the Linux operating system allows a hacker to gain access to confidential data and also cause service failures.

The vulnerability of the drivers/media/pci/mgb4 component in Linux operating systems is related to access to an uninitialized pointer. Exploiting this vulnerability can allow an attacker to gain access to confidential data and also cause service failures...

The vulnerability of the drivers/scsi/pm8001 component in the Linux operating system allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the drivers/scsi/pm8001 component in the Linux operating system is related to reading data from buffer files beyond their allowable limits. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and cause service failures...

Information Disclosure

github.com/authzed/spicedb is vulnerable to Information Disclosure. The vulnerability is due to the exclusion operator in the authorization schema, where a large payload can cause the WriteRelationships call to fail silently, and incorrect permission check results are returned, allowing attackers...

The vulnerability of the r871xu_drv_init() function in the drivers/staging/rtl8712/usb_intf.c module, which supports additional devices in the Linux operating system, allows a hacker to cause a service failure.

The vulnerability of the r871xudrvinit function in the drivers/staging/rtl8712/usbintf.c module, which supports additional devices in the Linux operating system, is related to improper initialization. Exploiting this vulnerability could allow an attacker to cause service failures...

The vulnerabilities of the functions p9_conn Cancel() and p9_read_work() in the net/9p/trans_fd.c module of the 9P protocol implementation in the Linux operating system allow a hacker to cause a service failure.

The vulnerabilities of the functions p9conn Cancel and p9readwork in the net/9p/transfd.c module of the 9P protocol implementation in the Linux operating system are related to the distribution of resources without any restrictions or regulations. Exploiting these vulnerabilities could allow a...

The vulnerability of the build_sit_entries() function in the fs/f2fs/segment.c module of the F2FS file system support in Linux kernel allows a attacker to cause a service failure.

The vulnerability of the buildsitentries function in the fs/f2fs/segment.c module of the F2FS file system support in Linux kernel allows for the exploitation of resources without any restrictions or regulation. Exploiting this vulnerability can enable a hacker to cause service failures...

The vulnerability of the snd_usbmidiOutputOpen() function in the sound/usb/midi.c module of Linux’s USB audio device support allows a hacker to cause a service failure.

The vulnerability of the sndusbmidioutputopen function in the sound/usb/midi.c module, which is part of Linux’s USB audio device support, involves unconstrained and unrestricted resource allocation. Exploiting this vulnerability could allow a hacker to cause service failures...

GHSA-7FCC-CW49-XM78 OpenClaw has command injection via Windows shell fallback in Lobster tool execution

Summary The Lobster extension tool execution path used a Windows shell fallback shell: true after spawn failures EINVAL/ENOENT. In that fallback path, shell metacharacters in command arguments can be interpreted by the shell, enabling command injection. Affected Packages / Versions - Package:...

PT-2026-26235

Summary On Windows, the Lobster extension previously retried certain spawn failures ENOENT/EINVAL with shell: true for wrapper compatibility. In that fallback path, tool-provided arguments could be interpreted by cmd.exe if fallback was triggered. Affected Packages / Versions - Package: openclaw...

MediaTek Chipsets 安全漏洞

MediaTek Chipsets are a series of chips developed by MediaTek Corporation in China. The MediaTek Chipsets contain security vulnerabilities; these vulnerabilities stem from the lack of boundary checks, which allows for out-of-bound writes, potentially leading to local privilege escalation...

MediaTek Chipsets 安全漏洞

MediaTek Chipsets are a series of chips developed by MediaTek Corporation in China. The MediaTek Chipsets contain security vulnerabilities; these vulnerabilities stem from the lack of boundary checks, which allows for out-of-bound writes, potentially leading to remote privilege escalation...

The vulnerability of the microprogrammed software of the NovelSat NS2000 and NS3000 satellite demodulators lies in the lack of authentication for critical functions. This allows a hacker to alter user passwords or cause service failures.

The vulnerability of the microprogrammed satellite demodulators NovelSat NS2000 and NS3000 lies in the lack of authentication for critical functions. Exploiting this vulnerability could allow a malicious actor to alter user passwords or cause service failures...

5 IoT Vulnerabilities That Stop Projects and How to Avoid Them

Stop the 75% failure rate. Learn which device vulnerabilities stall deployments and the exact fixes that get IoT projects to production...

OESA-2026-1438 wpa_supplicant security update

wpasupplicant is a WPA Supplicant for Linux, BSD, Mac OS X, and Windows with support for WPA and WPA2 IEEE 802.11i / RSN. It is suitable for both desktop/laptop computers and embedded systems. Supplicant is the IEEE 802.1X/WPA component that is used in the client stations. It implements key...

The vulnerability of the MacOS operating system, related to uncontrolled resource consumption, allows a perpetrator to trigger a service failure.

The vulnerability of the MacOS operating system is related to an uncontrolled consumption of resources. Exploiting this vulnerability can allow a hacker to cause service failures...

The vulnerability of the dbMount() function in the fs/jfs/jfs_dmap.c file of the Linux kernel’s JFS file system allows a attacker to access protected information or cause service failures.

The vulnerability of the dbMount function in the fs/jfs/jfsdmap.c file of the Linux kernel’s JFS file system is related to reading beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to access protected information or cause service failures...

The vulnerability of the device_init_td0_ring() function in the drivers/staging/vt6655/device_main.c file, which supports additional devices in the Linux operating system, allows a hacker to cause a service failure.

The vulnerability of the deviceinittd0ring function in the drivers/staging/vt6655/devicemain.c file, which supports additional devices in the Linux operating system, is related to improper memory release. Exploiting this vulnerability could allow a remote attacker to cause service failures...

The vulnerability of the raid1_read_request() function in the drivers/md/raid1.c module of the Linux kernel support for multiple devices (RAID and LVM) allows a hacker to cause a service failure.

The vulnerability of the raid1readrequest function in the drivers/md/raid1.c module of the Linux kernel’s device drivers for RAID and LVM systems is related to improper control of resource identifiers “resource injection”. Exploiting this vulnerability could allow an attacker to cause service...