ROS-20260403-73-0015

A vulnerability in the arm64/entry component of the Linux operating system kernel is related to resource release errors. Exploitation of the vulnerability allows an attacker to cause a denial of service...

The vulnerability of the mt7921_check_offload_capability() function in the drivers/net/wireless/mediatek/mt76/mt7921/init.c file of the Mediatek wireless communication adapter driver for the Linux operating system, which allows a hacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the mt7921checkoffloadcapability function in the drivers/net/wireless/mediatek/mt76/mt7921/init.c file of the Mediatek wireless adapter driver for the Linux operating system is related to the failure to release resources after their useful life has ended. Exploiting this...

The vulnerability of the mhi_init_mmio() function in the drivers/bus/mhi/host/init.c file of the MHI bus driver for Linux kernel exposes the confidentiality, integrity, and accessibility of protected information to be compromised by attackers.

The vulnerability of the mhiinitmmio function in the drivers/bus/mhi/host/init.c file of the MHI bus driver for Linux operating systems is related to the improper disabling or release of resources. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity,...

The vulnerability of the dasd_eckd_free_cp() function in the drivers/s390/block/dasd_eckd.c file of the Linux operating system’s S390 platform support driver for block devices allows a hacker to cause a service failure.

The vulnerability of the dasdeckdfreecp function in the drivers/s390/block/dasdeckd.c file of the Linux S390 kernel-based block device support driver involves improper disabling or release of resources. Exploiting this vulnerability could allow an attacker to cause service failure...

The vulnerabilities of the functions mdio_busPhy_suspend() and mdio_bus Phy_resume() in the module drivers/net/phy/phy_device.c of the Linux operating system’s physical-layer PHY driver allow a attacker to cause a service failure.

The vulnerability of the functions mdiobusPhysuspend and mdiobus Phyresume in the drivers/net/phy/phydevice.c file of the Linux physical-layer network driver is related to improper termination or release of resources. Exploiting this vulnerability could allow a remote attacker to cause service...

Squid: Squid: Denial of Service via crafted ICP traffic

A flaw was found in Squid. A remote attacker can exploit this vulnerability by sending specially crafted ICP Internet Cache Protocol traffic. This can lead to a Denial of Service DoS due to premature resource release and use-after-free vulnerabilities. This attack is possible in Squid deployments...

Improper Resource Shutdown or Release

Overview openclaw is a 🦞 OpenClaw — Personal AI Assistant Affected versions of this package are vulnerable to Improper Resource Shutdown or Release through the killProcessTree function in shell-utils.ts, which sends an immediate SIGKILL to background processes without allowing for a graceful...

The vulnerability in the arch/loongarch/kernel/traps.c module of the Linux operating system allows a hacker to cause a service failure.

The vulnerability in the arch/loongarch/kernel/traps.c module of the Linux operating system is related to the improper disabling or release of resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the ip6_forward() function in the net/ipv6/ip6_output.c module of the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the ip6forward function in the net/ipv6/ip6output.c module of the Linux operating system is related to the improper disabling or release of resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the prepare_trampoline() function in the arch/arm64/net/bpf_jit_comp.c network support module on the ARM 64-bit kernel platform of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the preparetrampoline function in the arch/arm64/net/bpfjitcomp.c network support module on the ARM 64-bit kernel of the Linux operating system is related to the improper disabling or release of resources. Exploiting this vulnerability can allow an attacker to cause a service...

The vulnerability of the s3c24xx_serial_getclk() function in the drivers/tty/serial/samsung_tty.c module of the console TTY driver in the Linux kernel’s serial port allows a hacker to cause a service failure.

The vulnerability of the s3c24xxserialgetclk function in the drivers/tty/serial/samsungtty.c module of the console TTY driver in the Linux kernel’s serial port is related to the failure to release resources after their useful life has expired. Exploiting this vulnerability could allow an attacker...

CVE-2026-32748 Squid has Denial of Service in ICP Response handling

Squid is a caching proxy for the Web. Prior to version 7.5, due to premature release of resource during expected lifetime and heap Use-After-Free bugs, Squid is vulnerable to Denial of Service when handling ICP traffic. This problem allows a remote attacker to perform a reliable and repeatable...

CVE-2026-32748

Squid is a caching proxy for the Web. Prior to version 7.5, due to premature release of resource during expected lifetime and heap Use-After-Free bugs, Squid is vulnerable to Denial of Service when handling ICP traffic. This problem allows a remote attacker to perform a reliable and repeatable...

The vulnerability of the mxc_jpeg_device_run() function in the drivers/media/platform/imx-jpeg/mxc-jpeg.c file of the Linux kernel’s multimedia device support driver allows a attacker to access protected information or cause a service failure.

The vulnerability of the mxcjpegdevicerun function in the drivers/media/platform/imx-jpeg/mxc-jpeg.c file of the Linux multimedia device driver module is related to the improper disabling or release of resources. Exploiting this vulnerability may allow an attacker to access protected information ...

The vulnerability of the svc_stop_kthreads() function in the net/sunrpc/svc.c module of the Linux operating system’s RPC kernel implementation allows a attacker to cause a service failure.

The vulnerability of the svcstopkthreads function in the net/sunrpc/svc.c module of the Linux operating system’s RPC implementation is related to the improper shutdown or release of resources. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the chacha_crypt_arch() function in the arch/s390/crypto/chacha-glue.c module, which is part of the S390 platform support in the Linux operating system, allows a hacker to cause a service failure.

The vulnerability of the chachacryptarch function in the arch/s390/crypto/chacha-glue.c module, which is part of the S390 platform support in the Linux operating system, is related to the improper disabling or release of resources. Exploiting this vulnerability could allow an attacker to cause a...

The vulnerability of the rtw89_cam_reset_key_iter() function in the driver/net/wireless/realtek/rtw89/cam.c file of the Realtek wireless adapter support driver for the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the rtw89camresetkeyiter function in the drivers/net/wireless/realtek/rtw89/cam.c file of the Realtek wireless adapter support driver for Linux operating systems is related to the improper shutdown or release of resources. Exploiting this vulnerability can allow an attacker t...

The vulnerability of the wl1251event_wait() function in the drivers/net/wireless/ti/wl1251/event.c module of the wireless adapter support driver from Texas Instruments’ Linux kernel allows a hacker to cause a service failure.

The vulnerability of the wl1251eventwait function in the drivers/net/wireless/ti/wl1251/event.c module of the wireless adapter support driver for Texas Instruments’ Linux operating system is related to the improper shutdown or release of resources. Exploiting this vulnerability could allow an...

Squid 安全漏洞

Squid is a set of open-source proxy servers and web caching servers developed by Squid. This software provides features such as caching the World Wide Web, filtering traffic, and proxy access. Prior to Squid 7.5, there were security vulnerabilities. These vulnerabilities stemmed from premature...

The vulnerability of the blk_mq_tag_update_depth() function in the block/blk-mq-tag.c module affects the block-level kernel support in the Linux operating system. This vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the blkmqtagupdatedepth function in the block/blk-mq-tag.c module related to Linux’s block-level kernel support involves improper disabling or release of resources. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and...