PT-2026-36343

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the FUSE Filesystem in Userspace component where the filesystem creation process can hang if the server exits due to an error or crash while processing FUSE INIT during...

SUSE CVE-2026-31689

In the Linux kernel, the following vulnerability has been resolved: EDAC/mc: Fix error path ordering in edacmcalloc When the mci-pvtinfo allocation in edacmcalloc fails, the error path will call putdevice which will end up calling the device's release function. However, the init ordering is wrong...

The vulnerability of the mpi3mr_init_ioc() function in Linux operating systems allows a attacker to compromise the accessibility of protected information.

The vulnerability of the mpi3mrinitioc function in Linux operating systems is related to the lack of memory release after the effective lifespan of the function has ended. Exploiting this vulnerability could allow an attacker to compromise the accessibility of protected information...

The vulnerability of the `early_init_dt_scan_memory()` function in Linux operating systems allows a hacker to compromise the accessibility of data.

The vulnerability of the earlyinitdtscanmemory function in Linux operating systems is related to the use of uninitialized resources. Exploiting this vulnerability can allow an attacker to compromise data accessibility...

The vulnerability of the `sc7180_lpass_init()` function in the sound module/soc/qcom/lpass-sc7180.c, which is part of the Linux operating system’s SoC kernel support for audio, allows a hacker to cause a service failure.

The vulnerability of the sc7180lpassinit function in the sound/soc/qcom/lpass-sc7180.c sound support module of the Linux operating system’s SoC kernel is related to the lack of checking for the return value. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the hws_pool_buddy_init() function in the drivers/net/ethernet/mellanox/mlx5/core/steering/hws/pool.c file of the Mellanox Ethernet network adapter driver for the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the hwspoolbuddyinit function in the drivers/net/ethernet/mellanox/mlx5/core/steering/hws/pool.c file of the Mellanox Ethernet network adapter driver for the Linux operating system is related to the failure to release resources after their useful life has expired. Exploiting...

Linux Distros Unpatched Vulnerability : CVE-2026-31687

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - gpio: omap: do not register driver in probe Commit 11a78b794496 ARM: OMAP: MPUIO wake updates registers the omapmpuiodriver from omapmpuioinit, which is called...

The vulnerability of the `init_mqueue_fs()` function in the `ipc/mqueue.c` module of the Linux kernel’s interprocess communication subsystem allows a attacker to cause a service failure.

The vulnerability of the initmqueuefs function in the ipc/mqueue.c module of the Linux kernel’s interprocess communication subsystem is related to improper memory release. Exploiting this vulnerability could allow an attacker to cause a service failure...

CVE-2026-41392

OpenClaw before 2026.3.31 contains an exec allowlist bypass vulnerability allowing attackers to inherit allowlist trust via shell init-file wrapper invocations. Attackers can exploit shell options like --rcfile, --init-file, and --startup-file to load attacker-chosen initialization files while...

EUVD-2026-26100

OpenClaw before 2026.3.31 contains an exec allowlist bypass vulnerability allowing attackers to inherit allowlist trust via shell init-file wrapper invocations. Attackers can exploit shell options like --rcfile, --init-file, and --startup-file to load attacker-chosen initialization files while...

CVE-2026-41392

OpenClaw before 2026.3.31 contains an exec allowlist bypass vulnerability allowing attackers to inherit allowlist trust via shell init-file wrapper invocations. Attackers can exploit shell options like --rcfile, --init-file, and --startup-file to load attacker-chosen initialization files while...

CVE-2026-41392 OpenClaw < 2026.3.31 - Exec Allowlist Bypass via Shell Init-File Options

OpenClaw before 2026.3.31 contains an exec allowlist bypass vulnerability allowing attackers to inherit allowlist trust via shell init-file wrapper invocations. Attackers can exploit shell options like --rcfile, --init-file, and --startup-file to load attacker-chosen initialization files while...

CVE-2026-41392

OpenClaw has a vulnerability (CVE-2026-41392) where exec allowlist matching can be bypassed by shell init-file wrapper invocations. Affected product: OpenClaw before 2026.3.31. Attack path involves using shell options such as --rcfile, --init-file, and --startup-file to load attacker-controlled i...

CVE-2026-41392: Incomplete List of Disallowed Inputs

OpenClaw before 2026.3.31 contains an exec allowlist bypass vulnerability allowing attackers to inherit allowlist trust via shell init-file wrapper invocations. Attackers can exploit shell options like --rcfile, --init-file, and --startup-file to load attacker-chosen initialization files while...

CVE-2026-31689

A flaw was found in the EDAC/mc module of the Linux kernel. An error in the ordering of operations within the edacmcalloc function can lead to a situation where a device's release function is called before the device is fully initialized. This improper initialization can result in a kernel warnin...

JLSEC-2026-243 Issue summary: A bug has been identified in the processing of key and initialisation vector (IV)...

Issue summary: A bug has been identified in the processing of key and initialisation vector IV lengths. This can lead to potential truncation or overruns during the initialisation of some symmetric ciphers. Impact summary: A truncation in the IV can result in non-uniqueness, which could result in...

JLSEC-2026-215 OpenSSL 1.1.1 introduced a rewritten random number generator (RNG)

OpenSSL 1.1.1 introduced a rewritten random number generator RNG. This was intended to include protection in the event of a fork system call in order to ensure that the parent and child processes did not share the same RNG state. However this protection was not being used in the default case. A...

CVE-2026-31687

In the Linux kernel, the following vulnerability has been resolved: gpio: omap: do not register driver in probe Commit 11a78b794496 "ARM: OMAP: MPUIO wake updates" registers the omapmpuiodriver from omapmpuioinit, which is called from omapgpioprobe. However, it neither makes sense to register...

CVE-2026-31687

In the Linux kernel, the following vulnerability has been resolved: gpio: omap: do not register driver in probe Commit 11a78b794496 "ARM: OMAP: MPUIO wake updates" registers the omapmpuiodriver from omapmpuioinit, which is called from omapgpioprobe. However, it neither makes sense to register...

CVE-2026-31687

The CVE-2026-31687 issue concerns the Linux kernel GPIO/omap driver: omap_mpuio_driver was registered from omap_gpio_probe() and could deadlock because a device lock may be held during probe, compounded by the driver core changes enforcing device_lock for driver_match_device(). The driver was als...