UBUNTU-CVE-2026-89554

In the Linux kernel, the following vulnerability has been resolved: mptcp: fix uninitialized localid in syncookie MPJOIN reconstruction mptcptokenjoincookieinitstate restores remotenonce, localnonce, backup, joinid, token and msk from the saved cookie entry when rebuilding the request socket for ...

CVE-2026-89554

CVE-2026-89554 affects the Linux kernel's MPTCP (Multipath TCP) implementation. When reconstructing a MP_JOIN request under SYN cookies, mptcp_token_join_cookie_init_state() fails to restore the local_id field from the saved cookie entry. Because the request-sock slab is SLAB_TYPESAFE_BY_RCU and ...

CVE-2026-32015

OpenClaw versions 2026.1.21 up to 2026.2.19 are affected by a path hijacking vulnerability in tools.exec.safeBins that lets an attacker influence gateway process PATH or launch environment to execute trojan binaries with allowlisted names (e.g., jq). The root cause is improper PATH resolution tha...