Squid: Squid: Denial of Service via crafted ICP traffic

A flaw was found in Squid. A remote attacker can exploit this vulnerability by sending specially crafted ICP Internet Cache Protocol traffic. This can lead to a Denial of Service DoS due to premature resource release and use-after-free vulnerabilities. This attack is possible in Squid deployments...

ROS-20260414-73-0001

Vulnerability in kernel-lt related to the non-release of a resource after its valid lifetime has expired. Exploitation of the vulnerability could allow an attacker to cause a denial of service...

FFmpeg 安全漏洞

FFmpeg is a complete set of solutions developed by the FFmpeg team for recording, converting, and streaming audio and video. Version 8.0.1 of FFmpeg contains a security vulnerability, which stems from improper resource release and closure of the tools/zmqsend.c component, potentially leading to...

ROS-20260408-73-0022

A vulnerability in the brmulticastqueryexpired function of the net/bridge/brmulticast.c component of the Linux kernel is related to resource release errors. Exploitation of the vulnerability allows an attacker to cause a denial of service...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-006573)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-006573 advisory. In the Linux kernel, the following vulnerability has been resolved: drivers: base: Free devm resources when unregistering a device In the current code,...

ROS-20260408-73-0029

A vulnerability in the arch/arm/mach-tegra/reset.c component of the Linux operating system kernel is related to resource release errors. Exploitation of the vulnerability could allow an attacker to cause a denial of service...

CVE-2026-5376

The CVE-2026-5376 issue affects the runZero Platform where session inactivity timeouts could fail to trigger due to automatic page reloading. Root cause is CWE-613 (Insufficient Control of Resources After Expiration or Release). CVSS v3.1 vector: AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:N, base score 5....

The vulnerability of the amdgpu_ring_fini() function in the drivers/gpu/drm/amd/amdgpu/amdgpu_ring.c driver of the Direct Rendering Infrastructure (DRI) AMD GPU kernel for the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the amdgpuringfini function in the drivers/gpu/drm/amd/amdgpu/amdgpuring.c driver of the Direct Rendering Infrastructure DRI AMD GPU kernel for the Linux operating system is related to the failure to release resources after their useful life has ended. Exploiting this...

ROS-20260403-73-0015

A vulnerability in the arm64/entry component of the Linux operating system kernel is related to resource release errors. Exploitation of the vulnerability allows an attacker to cause a denial of service...

The vulnerability of the mt7921_check_offload_capability() function in the drivers/net/wireless/mediatek/mt76/mt7921/init.c file of the Mediatek wireless communication adapter driver for the Linux operating system, which allows a hacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the mt7921checkoffloadcapability function in the drivers/net/wireless/mediatek/mt76/mt7921/init.c file of the Mediatek wireless adapter driver for the Linux operating system is related to the failure to release resources after their useful life has ended. Exploiting this...

The vulnerability of the dasd_eckd_free_cp() function in the drivers/s390/block/dasd_eckd.c file of the Linux operating system’s S390 platform support driver for block devices allows a hacker to cause a service failure.

The vulnerability of the dasdeckdfreecp function in the drivers/s390/block/dasdeckd.c file of the Linux S390 kernel-based block device support driver involves improper disabling or release of resources. Exploiting this vulnerability could allow an attacker to cause service failure...

The vulnerability of the mhi_init_mmio() function in the drivers/bus/mhi/host/init.c file of the MHI bus driver for Linux kernel exposes the confidentiality, integrity, and accessibility of protected information to be compromised by attackers.

The vulnerability of the mhiinitmmio function in the drivers/bus/mhi/host/init.c file of the MHI bus driver for Linux operating systems is related to the improper disabling or release of resources. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity,...

The vulnerabilities of the functions mdio_busPhy_suspend() and mdio_bus Phy_resume() in the module drivers/net/phy/phy_device.c of the Linux operating system’s physical-layer PHY driver allow a attacker to cause a service failure.

The vulnerability of the functions mdiobusPhysuspend and mdiobus Phyresume in the drivers/net/phy/phydevice.c file of the Linux physical-layer network driver is related to improper termination or release of resources. Exploiting this vulnerability could allow a remote attacker to cause service...

Squid: Squid: Denial of Service via crafted ICP traffic

A flaw was found in Squid. A remote attacker can exploit this vulnerability by sending specially crafted ICP Internet Cache Protocol traffic. This can lead to a Denial of Service DoS due to premature resource release and use-after-free vulnerabilities. This attack is possible in Squid deployments...

Improper Resource Shutdown or Release

Overview openclaw is a 🦞 OpenClaw — Personal AI Assistant Affected versions of this package are vulnerable to Improper Resource Shutdown or Release through the killProcessTree function in shell-utils.ts, which sends an immediate SIGKILL to background processes without allowing for a graceful...

The vulnerability in the arch/loongarch/kernel/traps.c module of the Linux operating system allows a hacker to cause a service failure.

The vulnerability in the arch/loongarch/kernel/traps.c module of the Linux operating system is related to the improper disabling or release of resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the prepare_trampoline() function in the arch/arm64/net/bpf_jit_comp.c network support module on the ARM 64-bit kernel platform of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the preparetrampoline function in the arch/arm64/net/bpfjitcomp.c network support module on the ARM 64-bit kernel of the Linux operating system is related to the improper disabling or release of resources. Exploiting this vulnerability can allow an attacker to cause a service...

The vulnerability of the ip6_forward() function in the net/ipv6/ip6_output.c module of the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the ip6forward function in the net/ipv6/ip6output.c module of the Linux operating system is related to the improper disabling or release of resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the s3c24xx_serial_getclk() function in the drivers/tty/serial/samsung_tty.c module of the console TTY driver in the Linux kernel’s serial port allows a hacker to cause a service failure.

The vulnerability of the s3c24xxserialgetclk function in the drivers/tty/serial/samsungtty.c module of the console TTY driver in the Linux kernel’s serial port is related to the failure to release resources after their useful life has expired. Exploiting this vulnerability could allow an attacker...

CVE-2026-32748 Squid has Denial of Service in ICP Response handling

Squid is a caching proxy for the Web. Prior to version 7.5, due to premature release of resource during expected lifetime and heap Use-After-Free bugs, Squid is vulnerable to Denial of Service when handling ICP traffic. This problem allows a remote attacker to perform a reliable and repeatable...