Squid: Squid: Denial of Service via crafted ICP traffic

A flaw was found in Squid. A remote attacker can exploit this vulnerability by sending specially crafted ICP Internet Cache Protocol traffic. This can lead to a Denial of Service DoS due to premature resource release and use-after-free vulnerabilities. This attack is possible in Squid deployments...

Improper Resource Shutdown or Release

Overview openclaw is a 🦞 OpenClaw — Personal AI Assistant Affected versions of this package are vulnerable to Improper Resource Shutdown or Release through the killProcessTree function in shell-utils.ts, which sends an immediate SIGKILL to background processes without allowing for a graceful...

The vulnerability in the arch/loongarch/kernel/traps.c module of the Linux operating system allows a hacker to cause a service failure.

The vulnerability in the arch/loongarch/kernel/traps.c module of the Linux operating system is related to the improper disabling or release of resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the prepare_trampoline() function in the arch/arm64/net/bpf_jit_comp.c network support module on the ARM 64-bit kernel platform of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the preparetrampoline function in the arch/arm64/net/bpfjitcomp.c network support module on the ARM 64-bit kernel of the Linux operating system is related to the improper disabling or release of resources. Exploiting this vulnerability can allow an attacker to cause a service...

The vulnerability of the s3c24xx_serial_getclk() function in the drivers/tty/serial/samsung_tty.c module of the console TTY driver in the Linux kernel’s serial port allows a hacker to cause a service failure.

The vulnerability of the s3c24xxserialgetclk function in the drivers/tty/serial/samsungtty.c module of the console TTY driver in the Linux kernel’s serial port is related to the failure to release resources after their useful life has expired. Exploiting this vulnerability could allow an attacker...

The vulnerability of the ip6_forward() function in the net/ipv6/ip6_output.c module of the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the ip6forward function in the net/ipv6/ip6output.c module of the Linux operating system is related to the improper disabling or release of resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2026-32748 Squid has Denial of Service in ICP Response handling

Squid is a caching proxy for the Web. Prior to version 7.5, due to premature release of resource during expected lifetime and heap Use-After-Free bugs, Squid is vulnerable to Denial of Service when handling ICP traffic. This problem allows a remote attacker to perform a reliable and repeatable...

CVE-2026-32748

Squid is a caching proxy for the Web. Prior to version 7.5, due to premature release of resource during expected lifetime and heap Use-After-Free bugs, Squid is vulnerable to Denial of Service when handling ICP traffic. This problem allows a remote attacker to perform a reliable and repeatable...

Squid 安全漏洞

Squid is a set of open-source proxy servers and web caching servers developed by Squid. This software provides features such as caching the World Wide Web, filtering traffic, and proxy access. Prior to Squid 7.5, there were security vulnerabilities. These vulnerabilities stemmed from premature...

The vulnerability of the svc_stop_kthreads() function in the net/sunrpc/svc.c module of the Linux operating system’s RPC kernel implementation allows a attacker to cause a service failure.

The vulnerability of the svcstopkthreads function in the net/sunrpc/svc.c module of the Linux operating system’s RPC implementation is related to the improper shutdown or release of resources. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the rtw89_cam_reset_key_iter() function in the driver/net/wireless/realtek/rtw89/cam.c file of the Realtek wireless adapter support driver for the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the rtw89camresetkeyiter function in the drivers/net/wireless/realtek/rtw89/cam.c file of the Realtek wireless adapter support driver for Linux operating systems is related to the improper shutdown or release of resources. Exploiting this vulnerability can allow an attacker t...

The vulnerability of the chacha_crypt_arch() function in the arch/s390/crypto/chacha-glue.c module, which is part of the S390 platform support in the Linux operating system, allows a hacker to cause a service failure.

The vulnerability of the chachacryptarch function in the arch/s390/crypto/chacha-glue.c module, which is part of the S390 platform support in the Linux operating system, is related to the improper disabling or release of resources. Exploiting this vulnerability could allow an attacker to cause a...

The vulnerability of the blk_mq_tag_update_depth() function in the block/blk-mq-tag.c module affects the block-level kernel support in the Linux operating system. This vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the blkmqtagupdatedepth function in the block/blk-mq-tag.c module related to Linux’s block-level kernel support involves improper disabling or release of resources. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and...

The vulnerability of the smb2_rename_path() function in the fs/smb/client/smb2inode.c module allows a hacker to compromise the confidentiality, integrity, and accessibility of protected information within the Linux operating system’s SMB kernel client.

The vulnerability of the smb2renamepath function in the fs/smb/client/smb2inode.c module, which is part of the SMB client support in Linux kernel, relates to the improper disabling or release of resources. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

ROS-20260324-73-0005

A vulnerability in the mm/vmalloc.c component of the Linux kernel is related to resource release errors. Exploitation of the vulnerability allows an attacker to cause a denial of service...

ROS-20260323-73-0012

A vulnerability in the pinctrl-msm component of the Linux kernel is related to resource release errors. Exploitation of the vulnerability allows an attacker to cause a denial of service...

The vulnerability in the driver/nvme/host/fc.c module of the Linux operating system allows a hacker to cause a service failure.

The vulnerability in the drivers/nvme/host/fc.c module of the Linux operating system is related to the improper shutdown or release of resources. Exploiting this vulnerability can allow an attacker to cause service failures...

ROS-20260323-73-0011

A vulnerability in the drm/sched component of the Linux kernel is related to resource release errors. Exploiting the vulnerability allows an attacker to cause a denial of service...

ROS-20260323-73-0026

A vulnerability in the mcast component of the Linux operating system kernel is related to resource release errors. Exploitation of the vulnerability allows an attacker to cause a denial of service...

The vulnerability of the gsc_set_affinity_irq() function in the drivers/parisc/gsc.c module of the Linux kernel allows a hacker to cause a service failure.

The vulnerability of the gscsetaffinityirq function in the drivers/parisc/gsc.c module of the Linux kernel is related to the improper disabling or release of resources. Exploiting this vulnerability may allow a remote attacker to cause service interruptions...