GHSA-JJP3-MQ3X-295M Electron: Use-after-free in PowerMonitor on Windows and macOS

Impact Apps that use the powerMonitor module may be vulnerable to a use-after-free. After the native PowerMonitor object is garbage-collected, the associated OS-level resources a message window on Windows, a shutdown handler on macOS retain dangling references. A subsequent session-change event...

PT-2026-30167

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition in the io uring/poll subsystem can cause a multishot recv operation to hang indefinitely when a socket send and shutdown occur in quick succession. This happens because...

PT-2026-30140

Name of the Vulnerable Software and Affected Versions Linux Kernel affected versions not specified Description A flaw exists in the Linux kernel related to XDP TX timestamps handling. Specifically, a page fault can occur when an XDP application requesting TX timestamping shuts down while the...

Improper Resource Shutdown or Release

Overview Affected versions of this package are vulnerable to Improper Resource Shutdown or Release via the stbigifloadnext function. An attacker can cause the application to become unavailable by enticing a user to open a specially crafted GIF image. This is only exploitable if a user interacts...

The vulnerability of the dsa_switch_shutdown() function in the net/dsa/dsa2.c module exposes a flaw in the support for Linux kernel distributed architecture switches, allowing an attacker to trigger a service failure.

The vulnerability of the dsaswitchshutdown function in the net/dsa/dsa2.c module relates to the pointer assignment. Exploiting this vulnerability could allow an attacker to trigger a service failure...

The vulnerability of the __sev_firmware_shutdown() function in the drivers/crypto/ccp/sev-dev.c driver of the Linux kernel’s cryptographic accelerator module allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the sevfirmwareshutdown function in the drivers/crypto/ccp/sev-dev.c file of the Linux kernel cryptographic accelerator driver involves the assignment of a null pointer. Exploiting this vulnerability could allow an attacker, operating remotely, to compromise the...

OpenClaw has incomplete Fix for CVE-2026-27486: Unvalidated SIGKILL in `!stop` Chat Command via `shell-utils.ts`

Fixed in OpenClaw 2026.3.24, the current shipping release. Advisory Details Title: Incomplete Fix for CVE-2026-27486: Unvalidated SIGKILL in !stop Chat Command via shell-utils.ts Description: Summary The !stop and /bash stop chat command kills background bash processes using SIGKILL directly,...

GHSA-3298-56P6-RPW2 OpenClaw has incomplete Fix for CVE-2026-27486: Unvalidated SIGKILL in `!stop` Chat Command via `shell-utils.ts`

Fixed in OpenClaw 2026.3.24, the current shipping release. Advisory Details Title: Incomplete Fix for CVE-2026-27486: Unvalidated SIGKILL in !stop Chat Command via shell-utils.ts Description: Summary The !stop and /bash stop chat command kills background bash processes using SIGKILL directly,...

Improper Resource Shutdown or Release

Overview openclaw is a 🦞 OpenClaw — Personal AI Assistant Affected versions of this package are vulnerable to Improper Resource Shutdown or Release through the killProcessTree function in shell-utils.ts, which sends an immediate SIGKILL to background processes without allowing for a graceful...

CVE-2025-13901

CWE-404 Improper Resource Shutdown or Release vulnerability exists that could cause partial Denial of Service on Machine Expert protocol when an unauthenticated attacker sends malicious payload to occupy active communication channels...

CVE-2026-33150

A flaw was found in libfuse. A use-after-free vulnerability in the iouring subsystem allows a local attacker to potentially execute arbitrary code and crash FUSE Filesystem in Userspace filesystem processes. This occurs when iouring thread creation fails due to resource exhaustion, such as limits...

The vulnerability of the wilc_netdev_cleanup() function in the drivers/net/wireless/microchip/wilc1000/netdev.c driver module of the Microchip wireless communication adapter support driver for Linux kernel allows a hacker to cause a service failure.

The vulnerability of the wilcnetdevcleanup function in the drivers/net/wireless/microchip/wilc1000/netdev.c driver for MicroChip wireless adapter support in Linux kernel is related to the improper shutdown or release of resources. Exploiting this vulnerability can allow an attacker to cause servi...

The vulnerability of the svc_stop_kthreads() function in the net/sunrpc/svc.c module of the Linux operating system’s RPC kernel implementation allows a attacker to cause a service failure.

The vulnerability of the svcstopkthreads function in the net/sunrpc/svc.c module of the Linux operating system’s RPC implementation is related to the improper shutdown or release of resources. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the `corsair_void_firmware_work_handler()` function in the `drivers/hid/hid-corsair-void.c` driver file of the Linux kernel’s input device subsystem allows a hacker to induce a service failure.

The vulnerability of the corsairvoidfirmwareworkhandler function in the drivers/hid/hid-corsair-void.c driver for the user interface device subsystem of the Linux operating system is related to the improper shutdown or release of resources. Exploiting this vulnerability could allow an attacker to...

SUSE CVE-2026-23372

In the Linux kernel, the following vulnerability has been resolved: nfc: rawsock: cancel txwork before socket teardown In rawsockrelease, cancel any pending txwork and purge the write queue before orphaning the socket. rawsocktxwork runs on the system workqueue and calls nfcdataexchange which...

EUVD-2026-15359

In the Linux kernel, the following vulnerability has been resolved: nfc: rawsock: cancel txwork before socket teardown In rawsockrelease, cancel any pending txwork and purge the write queue before orphaning the socket. rawsocktxwork runs on the system workqueue and calls nfcdataexchange which...

EUVD-2026-15299

In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: cancel rfkillblock work in wiphyunregister There is a use-after-free error in cfg80211shutdownallinterfaces found by syzkaller: BUG: KASAN: use-after-free in cfg80211shutdownallinterfaces+0x213/0x220 Read of size ...

CVE-2026-23336

In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: cancel rfkillblock work in wiphyunregister There is a use-after-free error in cfg80211shutdownallinterfaces found by syzkaller: BUG: KASAN: use-after-free in cfg80211shutdownallinterfaces+0x213/0x220 Read of size ...

UBUNTU-CVE-2026-23372

In the Linux kernel, the following vulnerability has been resolved: nfc: rawsock: cancel txwork before socket teardown In rawsockrelease, cancel any pending txwork and purge the write queue before orphaning the socket. rawsocktxwork runs on the system workqueue and calls nfcdataexchange which...

CVE-2026-23372

In the Linux kernel, the following vulnerability has been resolved: nfc: rawsock: cancel txwork before socket teardown In rawsockrelease, cancel any pending txwork and purge the write queue before orphaning the socket. rawsocktxwork runs on the system workqueue and calls nfcdataexchange which...