ROS-20260304-73-0028

A vulnerability in the usbbulkmsg function of the Linux kernel is related to incorrect resource initialization. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of service...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-005665)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005665 advisory. In the Linux kernel, the following vulnerability has been resolved: pstore/ram: Check start of empty przs during init After commit 30696378f68a pstore/ram: Do not...

ROS-20260304-73-0017

A vulnerability in the usbhsprobe function of the usb component of the Linux operating system kernel is related to incorrect resource initialization. Exploitation of the vulnerability could allow an attacker to cause a denial of service...

The vulnerability of the nlm_unlock_files() function in the fs/lockd/svcsubs.c module of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the nlmunlockfiles function in the fs/lockd/svcsubs.c module of the Linux kernel is related to improper initialization. Exploiting this vulnerability could allow an attacker to cause service failures...

PT-2026-36344

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak exists in the f2fs file system. The issue occurs within the f2fs rename function due to a call to f2fs setup filename that lacks a corresponding call to f2fs free filename,...

ROS-20260304-73-0027

A vulnerability in the media component of the Linux operating system kernel is related to improper resource initialization. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of service...

Incorrect Privilege Assignment

Overview openclaw is a 🦞 OpenClaw — Personal AI Assistant Affected versions of this package are vulnerable to Incorrect Privilege Assignment via the sessionsspawn process when using runtime="acp" in a sandboxed environment. An attacker can gain unauthorized access to host-side ACP initialization ...

GHSA-474H-PRJG-MMW3 OpenClaw: Sandboxed sessions_spawn(runtime="acp") bypassed sandbox inheritance and allowed host ACP initialization

Summary Sandboxed sessionsspawnruntime="acp" could bypass sandbox inheritance and initialize host-side ACP runtime. The fix now fail-closes ACP spawn from sandboxed requester sessions and rejects sandbox="require" for runtime="acp". Affected Packages / Versions - Package: openclaw npm - Latest...

CVE-2026-29022

drlibs drwav.h version 0.14.4 and earlier fixed in commit 8a7258c contain a heap buffer overflow vulnerability in the drwavreadsmpltometadataobj function of drwav.h that allows memory corruption via crafted WAV files. Attackers can exploit a mismatch between sampleLoopCount validation in pass 1 a...

CVE-2025-66363

An issue was discovered in LBS in Samsung Mobile Processor Exynos 2200. There was no check for memory initialization within DL NAS Transport messages...

PT-2026-25423

Summary Sandboxed sessions spawnruntime="acp" could bypass sandbox inheritance and initialize host-side ACP runtime. The fix now fail-closes ACP spawn from sandboxed requester sessions and rejects sandbox="require" for runtime="acp". Affected Packages / Versions - Package: openclaw npm - Latest...

PT-2026-22750

Name of the Vulnerable Software and Affected Versions Samsung Mobile Processor Exynos 2200 affected versions not specified Description An issue exists in LBS within the Samsung Mobile Processor Exynos 2200. The problem involves a missing check for memory initialization within DL NAS Transport...

CVE-2025-66363

An issue was discovered in LBS in Samsung Mobile Processor Exynos 2200. There was no check for memory initialization within DL NAS Transport messages...

CVE-2025-66363

An issue was discovered in LBS in Samsung Mobile Processor Exynos 2200. There was no check for memory initialization within DL NAS Transport messages...

SAMSUNG Exynos 2200 安全漏洞

Samsung Exynos 2200 is a mobile chip processor developed by South Korean company Samsung. There is a security vulnerability in the Samsung Exynos 2200, which stems from the lack of checking the memory initialization for DL NAS transmission messages in LBS...

CVE-2025-66363: Improper Initialization

An issue was discovered in LBS in Samsung Mobile Processor Exynos 2200. There was no check for memory initialization within DL NAS Transport messages...

EUVD-2025-208236

An issue was discovered in LBS in Samsung Mobile Processor Exynos 2200. There was no check for memory initialization within DL NAS Transport messages...

CVE-2025-66363

An issue was discovered in LBS within the Samsung Mobile Processor Exynos 2200 . The vulnerability stems from a missing check for memory initialization within DL NAS Transport messages . While the technical impact is noted as partial and the attack vector is network-based with low complexity, the...

CVE-2025-66363

An issue was discovered in LBS in Samsung Mobile Processor Exynos 2200. There was no check for memory initialization within DL NAS Transport messages...

CVE-2026-0029

In pkvminitvm of pkvm.c, there is a possible memory corruption due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...