Lucene search
+L

7223 matches found

Github Security Blog
Github Security Blog
•added 2026/04/25 11:45 p.m.•28 views

OpenClaw: Hook mapping templates could bypass hook session-key opt-in

Affected Packages / Versions - Package: openclaw npm - Affected versions: 2026.4.20 - Patched version: 2026.4.20 Impact Templated hook mapping sessionKey values were treated differently from request-supplied session keys. A hook mapping could render an externally influenced session key even when...

6.3CVSS5.9AI score0.0028EPSS
SaveExploits0References5Affected Software1
osv_ghsa
osv_ghsa
•added 2026/04/25 11:45 p.m.•52 views

GHSA-2XCP-X87W-Q377 OpenClaw: Hook mapping templates could bypass hook session-key opt-in

Affected Packages / Versions - Package: openclaw npm - Affected versions: 2026.4.20 - Patched version: 2026.4.20 Impact Templated hook mapping sessionKey values were treated differently from request-supplied session keys. A hook mapping could render an externally influenced session key even when...

6.9CVSS5.9AI score0.0028EPSS
SaveExploits0References5
Patchstack
Patchstack
•added 2026/04/25 11:45 p.m.•16 views

NPM: OpenClaw: Hook mapping templates could bypass hook session-key opt-in

NPM: OpenClaw: Hook mapping templates could bypass hook session-key opt-in vulnerability discovered by ? in WordPress Npm openclaw versions 2026.4.20...

5.8AI score
SaveExploits0References3Affected Software1
Fedora
Fedora
•added 2026/04/25 1:55 a.m.•24 views

[SECURITY] Fedora 44 Update: qt6-qtlocation-6.10.3-1.fc44

The Qt Location API helps you create viable mapping solutions using the data available from some of the popular location services...

5.3AI score
SaveExploits0
SUSE CVE
SUSE CVE
•added 2026/04/25 1:38 a.m.•18 views

SUSE CVE-2026-31589

In the Linux kernel, the following vulnerability has been resolved: mm: call -freefolio directly in foliounmapinvalidate We can only call filemapfreefolio if we have a reference to or hold a lock on the mapping. Otherwise, we've already removed the folio from the mapping so it no longer pins the...

7.6CVSS6.7AI score0.00444EPSS
SaveExploits0References4
SUSE CVE
SUSE CVE
•added 2026/04/25 1:36 a.m.•21 views

SUSE CVE-2026-31658

In the Linux kernel, the following vulnerability has been resolved: net: altera-tse: fix skb leak on DMA mapping error in tsestartxmit When dmamapsingle fails in tsestartxmit, the function returns NETDEVTXOK without freeing the skb. Since NETDEVTXOK tells the stack the packet was consumed, the sk...

4.7CVSS5.4AI score0.0012EPSS
SaveExploits0References9
Tenable Nessus
Tenable Nessus
•added 2026/04/25 12:00 a.m.•18 views

Linux Distros Unpatched Vulnerability : CVE-2026-31658

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: altera-tse: fix skb leak on DMA mapping error in tsestartxmit When dmamapsingle fails in tsestartxmit, the function returns NETDEVTXOK without freeing the...

5.5CVSS5.4AI score0.0012EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/04/25 12:00 a.m.•4 views

PT-2026-37319

Affected Packages / Versions - Package: openclaw npm - Affected versions: 2026.4.20 - Patched version: 2026.4.20 Impact Templated hook mapping sessionKey values were treated differently from request-supplied session keys. A hook mapping could render an externally influenced session key even when...

6.9CVSS6AI score0.0028EPSS
SaveExploits0References6
RedhatCVE
RedhatCVE
•added 2026/04/24 10:19 p.m.•22 views

CVE-2026-31658

A flaw was found in the Linux kernel's net: altera-tse network driver. When a Direct Memory Access DMA mapping error occurs in the tsestartxmit function, the system fails to free the allocated socket buffer skb. This oversight causes a memory leak with each DMA mapping failure, potentially leadin...

5.5CVSS5.4AI score0.0012EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2026/04/24 8:32 p.m.•17 views

CVE-2026-35380

A logic error in the cut utility of uutils coreutils causes the program to incorrectly interpret the literal two-byte string '' two single quotes as an empty delimiter. The implementation mistakenly maps this string to the NUL character for both the -d delimiter and --output-delimiter options. Th...

5.5CVSS6.2AI score0.00157EPSS
SaveExploits1References2
osv_debian
osv_debian
•added 2026/04/24 3:16 p.m.•18 views

DEBIAN-CVE-2026-31658

In the Linux kernel, the following vulnerability has been resolved: net: altera-tse: fix skb leak on DMA mapping error in tsestartxmit When dmamapsingle fails in tsestartxmit, the function returns NETDEVTXOK without freeing the skb. Since NETDEVTXOK tells the stack the packet was consumed, the sk...

5.5CVSS5.7AI score0.0012EPSS
SaveExploits0References1
osv_azl
osv_azl
•added 2026/04/24 3:16 p.m.•18 views

AZL-83891 CVE-2026-31658 affecting package kernel for versions less than 6.6.137.1-1

In the Linux kernel, the following vulnerability has been resolved: net: altera-tse: fix skb leak on DMA mapping error in tsestartxmit When dmamapsingle fails in tsestartxmit, the function returns NETDEVTXOK without freeing the skb. Since NETDEVTXOK tells the stack the packet was consumed, the sk...

5.5CVSS5.4AI score0.0012EPSS
SaveExploits0References1
NVD
NVD
•added 2026/04/24 3:16 p.m.•17 views

CVE-2026-31649

In the Linux kernel, the following vulnerability has been resolved: net: stmmac: fix integer underflow in chain mode The jumbofrm chain-mode implementation unconditionally computes len = nopagedlen - bmax; where nopagedlen = skbheadlenskb linear bytes only and bmax is BUFSIZE8KiB or BUFSIZE2KiB...

9.8CVSS0.00459EPSS
SaveExploits0References11
osv_debian
osv_debian
•added 2026/04/24 3:16 p.m.•23 views

DEBIAN-CVE-2026-31654

In the Linux kernel, the following vulnerability has been resolved: mm/vma: fix memory leak in mmapregion commit 605f6586ecf7 "mm/vma: do not leak memory when .mmapprepare swaps the file" handled the success path by skipping getfile via filedoesntneedget, but missed the error path. When /dev/zero...

5.5CVSS5.7AI score0.00113EPSS
SaveExploits0References1
osv_debian
osv_debian
•added 2026/04/24 3:16 p.m.•17 views

DEBIAN-CVE-2026-31602

In the Linux kernel, the following vulnerability has been resolved: ALSA: ctxfi: Limit PTP to a single page Commit 391e69143d0a increased CTPTPNUM from 1 to 4 to support 256 playback streams, but the additional pages are not used by the card correctly. The CT20K2 hardware already has multiple...

7.8CVSS6.1AI score0.00131EPSS
SaveExploits0References1
NVD
NVD
•added 2026/04/24 3:16 p.m.•18 views

CVE-2026-31589

In the Linux kernel, the following vulnerability has been resolved: mm: call -freefolio directly in foliounmapinvalidate We can only call filemapfreefolio if we have a reference to or hold a lock on the mapping. Otherwise, we've already removed the folio from the mapping so it no longer pins the...

9.8CVSS0.00444EPSS
SaveExploits0References4
osv_debian
osv_debian
•added 2026/04/24 3:16 p.m.•18 views

DEBIAN-CVE-2026-31589

In the Linux kernel, the following vulnerability has been resolved: mm: call -freefolio directly in foliounmapinvalidate We can only call filemapfreefolio if we have a reference to or hold a lock on the mapping. Otherwise, we've already removed the folio from the mapping so it no longer pins the...

9.8CVSS6.9AI score0.00444EPSS
SaveExploits0References1
osv_azl
osv_azl
•added 2026/04/24 3:16 p.m.•11 views

AZL-83675 CVE-2026-31589 affecting package kernel for versions less than 6.6.134.1-2

In the Linux kernel, the following vulnerability has been resolved: mm: call -freefolio directly in foliounmapinvalidate We can only call filemapfreefolio if we have a reference to or hold a lock on the mapping. Otherwise, we've already removed the folio from the mapping so it no longer pins the...

9.8CVSS6.7AI score0.00444EPSS
SaveExploits0References1
CVE
CVE
•added 2026/04/24 2:45 p.m.•91 views

CVE-2026-31658

CVE-2026-31658 affects the Linux kernel net: altera-tse driver. The root cause is a memory leak: when dma_map_single() fails in tse_start_xmit(), the code returns NETDEV_TX_OK without freeing the skb, causing the skb to be leaked on every DMA mapping failure. The provided patches add dev_kfree_sk...

5.5CVSS5.4AI score0.0012EPSS
SaveExploits0References11Affected Software1
Debian CVE
Debian CVE
•added 2026/04/24 2:45 p.m.•28 views

CVE-2026-31658

In the Linux kernel, the following vulnerability has been resolved: net: altera-tse: fix skb leak on DMA mapping error in tsestartxmit When dmamapsingle fails in tsestartxmit, the function returns NETDEVTXOK without freeing the skb. Since NETDEVTXOK tells the stack the packet was consumed, the sk...

5.5CVSS5.7AI score0.0012EPSS
SaveExploits0
Rows per page
Query Builder