CVE-2024-48990

CVE-2024-48990 Exploit Local Privilege Escalation in needrestart 3.8 via PYTHONPATH injection. How It Works 1. needrestart runs as root and scans all processes 2. Finds our Python process, reads PYTHONPATH=/tmp/.m from /proc/pid/environ 3. Executes Python as root with our malicious PYTHONPATH 4...

CVE-2026-100570

OpenClaw npm package 'openclaw' versions = 2026.3.28 and 2026.8.1 allow an untrusted workspace .env file to set the CLOUDSDKPYTHONARGS environment variable. When an operator starts OpenClaw in attacker-controlled workspace content and then runs the Gmail setup flow, that value is inherited when...

CVE-2026-100570 OpenClaw before 2026.8.1 Remote Code Execution via CLOUDSDK_PYTHON_ARGS

OpenClaw npm package 'openclaw' versions = 2026.3.28 and 2026.8.1 allow an untrusted workspace .env file to set the CLOUDSDKPYTHONARGS environment variable. When an operator starts OpenClaw in attacker-controlled workspace content and then runs the Gmail setup flow, that value is inherited when...

CVE-2026-100570 OpenClaw before 2026.8.1 Remote Code Execution via CLOUDSDK_PYTHON_ARGS

OpenClaw npm package 'openclaw' versions = 2026.3.28 and 2026.8.1 allow an untrusted workspace .env file to set the CLOUDSDKPYTHONARGS environment variable. When an operator starts OpenClaw in attacker-controlled workspace content and then runs the Gmail setup flow, that value is inherited when...

OESA-2026-4100 libpcap security update

This is the official web site of tcpdump, a powerful command-line packet analyzer; and libpcap, a portable C/C++ library for network traffic capture. Security Fixes: In BPF instructions that load/store a value from/to a scratch memory register the register index is an unsigned 32-bit integer and...

SUSE CVE-2026-93270

In the Linux kernel, the following vulnerability has been resolved: bpf: Disallow interpreter fallback for BPFADDRPERCPU insn The BPFMOV64PERCPUREG insn requires JIT to emit native code to for 'dstreg = srcreg + '. However, the interpreter ignores the 'off' at its ALU64MOVX label. The 'off'...

CVE-2026-13248

An Authenticated Remote Code Execution via Arbitrary File Write in the Intermec Fingerprint Command Interface vulnerability in the web management interface in Honeywell PD45 Industrial Printer version...

CVE-2026-93270

In the Linux kernel, the following vulnerability has been resolved: bpf: Disallow interpreter fallback for BPFADDRPERCPU insn The BPFMOV64PERCPUREG insn requires JIT to emit native code to for 'dstreg = srcreg + '. However, the interpreter ignores the 'off' at its ALU64MOVX label. The 'off'...

CVE-2026-93270

The Linux kernel contains a vulnerability where the BPF interpreter fails to handle the BPF_MOV64_PERCPU_REG instruction correctly. Specifically, the interpreter ignores the 'off' offset at its ALU64_MOV_X label, which is necessary for the JIT to emit correct native code for dst_reg = src_reg + ....

CVE-2026-93270 bpf: Disallow interpreter fallback for BPF_ADDR_PERCPU insn

In the Linux kernel, the following vulnerability has been resolved: bpf: Disallow interpreter fallback for BPFADDRPERCPU insn The BPFMOV64PERCPUREG insn requires JIT to emit native code to for 'dstreg = srcreg + '. However, the interpreter ignores the 'off' at its ALU64MOVX label. The 'off'...

EUVD-2026-86142

In the Linux kernel, the following vulnerability has been resolved: bpf: Disallow interpreter fallback for BPFADDRPERCPU insn The BPFMOV64PERCPUREG insn requires JIT to emit native code to for 'dstreg = srcreg + '. However, the interpreter ignores the 'off' at its ALU64MOVX label. The 'off'...

CVE-2026-93270 bpf: Disallow interpreter fallback for BPF_ADDR_PERCPU insn

In the Linux kernel, the following vulnerability has been resolved: bpf: Disallow interpreter fallback for BPFADDRPERCPU insn The BPFMOV64PERCPUREG insn requires JIT to emit native code to for 'dstreg = srcreg + '. However, the interpreter ignores the 'off' at its ALU64MOVX label. The 'off'...

CVE-2026-93270

In the Linux kernel, the following vulnerability has been resolved: bpf: Disallow interpreter fallback for BPFADDRPERCPU insn The BPFMOV64PERCPUREG insn requires JIT to emit native code to for 'dstreg = srcreg + '. However, the interpreter ignores the 'off' at its ALU64MOVX label. The 'off'...

PT-2026-97957

In the Linux kernel, the following vulnerability has been resolved: bpf: Disallow interpreter fallback for BPF ADDR PERCPU insn The BPF MOV64 PERCPU REG insn requires JIT to emit native code to for 'dst reg = src reg + '. However, the interpreter ignores the 'off' at its ALU64 MOV X label. The...

CVE-2026-93270: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: bpf: Disallow interpreter fallback for BPFADDRPERCPU insn The BPFMOV64PERCPUREG insn requires JIT to emit native code to for 'dstreg = srcreg + '. However, the interpreter ignores the 'off' at its ALU64MOVX label. The 'off'...

SUSE-SU-2026:23907-1 Security update for libpcap

This update for libpcap fixes the following issues: - CVE-2026-0799: the BPF interpreter does not validate values in BPF instructions that load/store a value from/to a scratch memory register and allows for OOB access bsc1279782. - CVE-2026-6244: libpcap BPF interpreter for the 'div k' and 'mod k...

SUSE-SU-2026:23892-1 Security update for libpcap

This update for libpcap fixes the following issues: - CVE-2026-0799: the BPF interpreter does not validate values in BPF instructions that load/store a value from/to a scratch memory register and allows for OOB access bsc1279782. - CVE-2026-6244: libpcap BPF interpreter for the 'div k' and 'mod k...

OPENSUSE-SU-2026:21940-1 Security update for libpcap

This update for libpcap fixes the following issues: - CVE-2026-0799: the BPF interpreter does not validate values in BPF instructions that load/store a value from/to a scratch memory register and allows for OOB access bsc1279782. - CVE-2026-6244: libpcap BPF interpreter for the 'div k' and 'mod k...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: ruby (UTSA-2026-090081)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-090081 advisory. The JSON gem through 2.2.0 for Ruby, as used in Ruby 2.4 through 2.4.9, 2.5 through 2.5.7, and 2.6 through 2.6.5, has an Unsafe Object Creation Vulnerability. This i...

VulnCheck KEV: CVE-2026-88062

OmniRoute is an open-source AI gateway providing a single endpoint for multiple model providers. In 3.8.49 and earlier, the OmniRoute POST /api/acp/agents custom ACP agent endpoint accepted attacker-controlled binary and versionCommand values and used only a self-consistency check before...