CVE-2026-100539 OpenClaw before 2026.8.1 Memory Access Control Bypass

OpenClaw npm package 'openclaw' before 2026.8.1 fails to revoke memory tool access when an operator hot-disables memory configuration. Existing memorysearch and memoryget tool instances retain the enabled configuration captured at creation time because the execution-time resolver treats explicit...

SUSE CVE-2026-88357

nDPI 5.1.0 contains a memory access issue in the DNS dissector and serializer deserialization code. Specially crafted network input can cause byte-buffer addresses at odd offsets to be cast to uint16t or wider integer pointers and directly dereferenced without alignment checks. This results in...

SUSE CVE-2026-88386

libsndfile 1.2.2 contains a misaligned memory access issue in psfbinheaderreadf while parsing WAV fmt chunks. A specially crafted WAV file can cause the function to cast an unaligned destination address to unsigned int and perform a 4-byte store. This results in undefined behavior leading to deni...

CVE-2026-88360

A flaw was found in libvips, an image processing library. When handling specially crafted little-endian PFM Portable Float Map images, an attacker could trigger an unaligned memory access. This occurs if the image's text header length is not a multiple of four bytes, causing the loader to expose...

DEBIAN-CVE-2026-97912

In the Linux kernel, the following vulnerability has been resolved: accel: ethosu: Ensure SRAM size is 0 on mapping failure On a mapping failure of the SRAM, the SRAM size is left as non-zero. The probe will succeed as the error return is not checked since having SRAM is not a hard requirement. T...

CVE-2026-97911

In the Linux kernel, the following vulnerability has been resolved: accel: ethosu: Ensure SRAM region size matches job It is possible for userspace to set the job SRAM size to 0, but then still have SRAM accesses in the command stream. When the job SRAM size is 0, setting the region base register...

DEBIAN-CVE-2026-97612

In the Linux kernel, the following vulnerability has been resolved: net: mpls: clear innerprotocol when the last label is popped skbmplspush records the pre-encapsulation network header once, gated on !skb-innerprotocol. skbmplspop never clears that record, so it outlives the encapsulation it...

UBUNTU-CVE-2026-97912

In the Linux kernel, the following vulnerability has been resolved: accel: ethosu: Ensure SRAM size is 0 on mapping failure On a mapping failure of the SRAM, the SRAM size is left as non-zero. The probe will succeed as the error return is not checked since having SRAM is not a hard requirement. T...

UBUNTU-CVE-2026-98089

In the Linux kernel, the following vulnerability has been resolved: bonding: alb: fix uninitialized transport header access in albdeterminend albdeterminend uses icmp6hdrskb to inspect ICMPv6 headers. However, in xmit paths e.g. packets sent via AFPACKET / raw sockets or forwarded packets,...

UBUNTU-CVE-2026-97960

In the Linux kernel, the following vulnerability has been resolved: perf/x86/intel: Prevent drainpebs reentry The PEBS buffer is shared by all events on a CPU, so drainpebs must not be reentered. If so, one instance may observe stale buffer state and potentially access out-of-bound memory. Most...

UBUNTU-CVE-2026-97911

In the Linux kernel, the following vulnerability has been resolved: accel: ethosu: Ensure SRAM region size matches job It is possible for userspace to set the job SRAM size to 0, but then still have SRAM accesses in the command stream. When the job SRAM size is 0, setting the region base register...

CVE-2026-98156 drm/virtio: use the DMA API for resource backing on Xen

In the Linux kernel, the following vulnerability has been resolved: drm/virtio: use the DMA API for resource backing on Xen On a Xen PV domain page addresses bear no relation to the real machine addresses the host would have to use to reach it. virtioring.c handles this correctly, vringusemapapi...

CVE-2026-98063 bpf: Fix NULL-ptr-deref in btf_var_show()

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix NULL-ptr-deref in btfvarshow btfvarshow calls btftypeidresolve unconditionally, which dereferences btf-resolvedids. That is NULL for a base BTF - e.g. the vmlinux BTF that bpfsnprintfbtf renders against - since base BTF ...

CVE-2026-97960 perf/x86/intel: Prevent drain_pebs() reentry

In the Linux kernel, the following vulnerability has been resolved: perf/x86/intel: Prevent drainpebs reentry The PEBS buffer is shared by all events on a CPU, so drainpebs must not be reentered. If so, one instance may observe stale buffer state and potentially access out-of-bound memory. Most...

EUVD-2026-86814

In the Linux kernel, the following vulnerability has been resolved: perf/x86/intel: Prevent drainpebs reentry The PEBS buffer is shared by all events on a CPU, so drainpebs must not be reentered. If so, one instance may observe stale buffer state and potentially access out-of-bound memory. Most...

CVE-2026-97912 accel: ethosu: Ensure SRAM size is 0 on mapping failure

In the Linux kernel, the following vulnerability has been resolved: accel: ethosu: Ensure SRAM size is 0 on mapping failure On a mapping failure of the SRAM, the SRAM size is left as non-zero. The probe will succeed as the error return is not checked since having SRAM is not a hard requirement. T...

CVE-2026-97912 accel: ethosu: Ensure SRAM size is 0 on mapping failure

In the Linux kernel, the following vulnerability has been resolved: accel: ethosu: Ensure SRAM size is 0 on mapping failure On a mapping failure of the SRAM, the SRAM size is left as non-zero. The probe will succeed as the error return is not checked since having SRAM is not a hard requirement. T...

EUVD-2026-86766

In the Linux kernel, the following vulnerability has been resolved: accel: ethosu: Ensure SRAM size is 0 on mapping failure On a mapping failure of the SRAM, the SRAM size is left as non-zero. The probe will succeed as the error return is not checked since having SRAM is not a hard requirement. T...

MemGuard

🛡️ MemGuard — ゼロ依存のLSASSメモリシールド & EDRフック検出器 -0078D6.svg?logo=windows&logoColor=white -brightgreen.svg 不正なLSASSメモリアクセス、ハンドルの複製、およびLOLBinによる資格情報ダンプの試行をリアルタイムで検出・緩和する、軽量でゼロ依存のWindows EDRユーティリティ。 📌 脅威の概要: なぜLSASSを保護するのか? Windowsエンタープライズ環境では、Local Security Authority Subsystem Service lsass.exe...

CVE-2026-97417

A flaw was found in the Linux kernel's netfilter connection tracking subsystem. The TCP option processing mechanism improperly assumes memory alignment when reading packet headers. A remote attacker could exploit this vulnerability by sending crafted TCP packets with misaligned SACK options throu...