EUVD-2026-69020

Untrusted pointer dereference vulnerability in Samsung Open Source mTower allows Pointer Manipulation. This issue affects mTower: before 102d3dc75cf8e58e68e4bea54ae3c803992c91be...

CVE-2026-10420

Untrusted pointer dereference vulnerability in Samsung Open Source mTower allows Pointer Manipulation. This issue affects mTower: before 102d3dc75cf8e58e68e4bea54ae3c803992c91be...

CVE-2026-10420

Untrusted pointer dereference vulnerability in Samsung Open Source mTower allows Pointer Manipulation. This issue affects mTower: before 102d3dc75cf8e58e68e4bea54ae3c803992c91be...

CVE-2026-80605

A flaw was found in the Linux kernel. An integer overflow in the picolcdsendandwait function within the Human Interface Device HID picolcd driver can occur when a signed loop counter overflows. This can lead to an incorrect condition evaluation, resulting in a NULL pointer dereference. This...

CVE-2026-82927

Untrusted pointer dereference vulnerability in Samsung Open Source mTower allows Pointer Manipulation. This issue affects mTower: before 06994e303637512e39062f3e037c222e8448e57e...

CVE-2026-82927

CVE-2026-82927 is an untrusted pointer dereference vulnerability in Samsung Open Source mTower that allows pointer manipulation . The vulnerability is present in mTower versions prior to commit 06994e303637512e39062f3e037c222e8448e57e. The CVSS 3.1 score is 5.5 (MEDIUM) with a local attack vector...

EUVD-2026-69011

Untrusted pointer dereference vulnerability in Samsung Open Source mTower allows Pointer Manipulation. This issue affects mTower: before 06994e303637512e39062f3e037c222e8448e57e...

CVE-2026-82927

Untrusted pointer dereference vulnerability in Samsung Open Source mTower allows Pointer Manipulation. This issue affects mTower: before 06994e303637512e39062f3e037c222e8448e57e...

CVE-2026-82927

Untrusted pointer dereference vulnerability in Samsung Open Source mTower allows Pointer Manipulation. This issue affects mTower: before 06994e303637512e39062f3e037c222e8448e57e...

CVE-2026-80690

A flaw was found in the Linux kernel's SCSI Universal Flash Storage UFS core. When the ufshcdallochost function fails to initialize the hba-rpmbs list, it can lead to a null pointer dereference during device teardown. This vulnerability could allow a local attacker to cause a system crash,...

CVE-2026-82926

NULL pointer dereference vulnerability in Samsung Open Source mTower allows Pointer Manipulation. This issue affects mTower: before afef59aa6f55c5d5ebf9b14bc020bf1c2c37489a...

CVE-2026-82926

A NULL pointer dereference vulnerability in Samsung Open Source mTower allows Pointer Manipulation , leading to a High availability impact (potential crash) but no confidentiality or integrity loss per the CNA-assigned CVSS 3.1 score of 5.5 (MEDIUM) . The attack requires a local vector with user ...

EUVD-2026-69010

NULL pointer dereference vulnerability in Samsung Open Source mTower allows Pointer Manipulation. This issue affects mTower: before afef59aa6f55c5d5ebf9b14bc020bf1c2c37489a...

CVE-2026-82926

NULL pointer dereference vulnerability in Samsung Open Source mTower allows Pointer Manipulation. This issue affects mTower: before afef59aa6f55c5d5ebf9b14bc020bf1c2c37489a...

CVE-2026-82926

NULL pointer dereference vulnerability in Samsung Open Source mTower allows Pointer Manipulation. This issue affects mTower: before afef59aa6f55c5d5ebf9b14bc020bf1c2c37489a...

kernel: NFSv4/flexfiles: reject zero filehandle version count

A flaw was found in the Linux kernel's NFSv4 Network File System version 4 flexfiles component. This vulnerability occurs when the fflayoutalloclseg function processes a malformed flexfiles layout that specifies a zero filehandle version count. An attacker could exploit this by providing a...

kernel: crypto: qat - fix VF2PF work teardown race in adf_disable_sriov()

A flaw was found in the Linux kernel's crypto QAT QuickAssist Technology module. A race condition exists during the teardown of Virtual Function to Physical Function VF2PF work in the adfdisablesriov function. This allows a concurrently scheduled or already queued worker to attempt to access memo...

kernel: NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr

A flaw was found in the Linux kernel's NFSv4/pNFS implementation. The nfs4decodempdsaddr function, responsible for decoding network address information, does not properly handle zero-length raddr opaque data. A malicious or compromised metadata server can exploit this by providing a zero-length...

CVE-2026-80704

A flaw was found in the Linux kernel's drm/amd/display component. This vulnerability arises from the improper use of an uninitialized logging context, which can lead to a NULL pointer dereference. A local attacker could potentially trigger this flaw, causing the system to crash and resulting in a...

CVE-2026-80657

A flaw was found in the Linux kernel's accel/amdxdna component. The management mailbox channel cleanup helpers, xdnamailboxfreechannel and xdnamailboxstopchannel, could be called from error handling paths when the mgmtchann was already destroyed. This could lead to a NULL pointer dereference,...