CVE-2026-80655: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: soc: xilinx: Fix race condition in event registration The zynqmppower driver registers handlers for suspend and subsystem restart events using registerevent. However, the work structures zynqmppminitsuspendwork and...

The vulnerability of the qcom/qdsp6 component in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the qcom/qdsp6 component in the Linux operating system is related to pointer arithmetic errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

PT-2026-86730

In the Linux kernel, the following vulnerability has been resolved: tracing/mmiotrace: Add NULL check for mmio trace array in logging functions mmio trace rw and mmio trace mapping retrieve mmio trace array into tr and pass it to trace mmiotrace rw and trace mmiotrace map. If these functions are...

CVE-2026-76650: NULL Pointer Dereference

A NULL pointer dereference vulnerability exists in TL-WR841N v14 in the UPnP service when processing SOAP state variable query requests. A specially crafted SOAP query may trigger unexpected termination or instability of the process hosting the UPnP service. Successful exploitation may result in ...

CVE-2026-76649: NULL Pointer Dereference

A NULL pointer dereference vulnerability exists in TL-WR841N v14 in the UPnP service when processing SOAP action requests. A specially crafted SOAP action request containing unexpected XML content may cause the UPnP daemon to terminate unexpectedly. Successful exploitation may result in a...

PT-2026-82932

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7996: Fix NULL pointer dereference in mt7996 init tx queues When MT76 NPU and CONFIG NET MEDIATEK SOC WED are enabled and mt76 detects properly the Airoha NPU SoC, mt7996 init tx queues will dereference a NULL WED...

CVE-2026-80648: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: pinctrl: spacemit: fix NULL check in spacemitpinsetconfig spacemitpinsetconfig looks up the per-pin descriptor with spacemitgetpin then checks the wrong variable for failure: const struct spacemitpin spin = spacemitgetpinpctrl,...

PT-2026-83353

A NULL pointer dereference vulnerability exists in TL-WR841N v14 in the UPnP service when processing SOAP action requests. A specially crafted SOAP action request containing unexpected XML content may cause the UPnP daemon to terminate unexpectedly. Successful exploitation may result in a...

PT-2026-82978

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition and error handling flaw exist in the i2c imx driver. In the i2c imx reg slave function, the slave pointer is assigned before the pm runtime resume and get function is...

CVE-2026-80679: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: s390/dasd: Fix potential NULL pointer dereference dasdreleasespace checks the implementation of the isese discipline function before calling it to determine if a given device is an ESE DASD. The current usage of the logical AND...

CVE-2026-80597: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: mtd: maps: vmu-flash: fix NULL pointer dereference in initialization The mtdinfo contains a struct device, which must be linked to its parent. Without this, the initialization of the MTD fails with a NULL pointer dereference...

CVE-2026-75125: NULL Pointer Dereference

PLANET GS-4210-16P2S V3 firmware before 3.441b260626 contains an authenticated null pointer dereference vulnerability in /cgi-bin/dispatcher.cgi. The webpoealivermtippost handler dereferences the rmtIP parameter without verifying its presence. A remote authenticated attacker can send a crafted...

PT-2026-82997

In the Linux kernel, the following vulnerability has been resolved: erofs: ensure valid f path for page cache sharing Previously, backing files for page cache sharing were set up with f path left as NULL only f inode was valid. It worked, but a recent mincore fix relies on f path.mnt and crashes...

The vulnerability in the driver/spi/spi.c component of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the drivers/spi/spi.c component in the Linux operating system is related to pointer dereferencing errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

MiracleLinux 9 : kernel-5.14.0-687.25.1.el9_8 (AXSA:2026-1687:69)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1687:69 advisory. kernel: Linux kernel: Memory leak in networking due to incorrect GRO packet handling CVE-2026-22979 kernel: rtmutex: Use waiter::task instead of...

EUVD-2026-67307

Wazuh is an open-source security platform providing unified XDR and SIEM protection for endpoints and cloud workloads. In versions 4.0.0 through 4.14.6, a malicious or man-in-the-middle enrollment manager can crash a Wazuh agent during enrollment by returning a malformed key response with fewer...

CVE-2026-54084 Wazuh agent enrollment NULL pointer dereference via malformed manager response

Wazuh is an open-source security platform providing unified XDR and SIEM protection for endpoints and cloud workloads. In versions 4.0.0 through 4.14.6, a malicious or man-in-the-middle enrollment manager can crash a Wazuh agent during enrollment by returning a malformed key response with fewer...

CVE-2026-54084

Wazuh versions 4.0.0 through 4.14.6 are susceptible to a NULL pointer dereference in the w_enrollment_process_agent_key() routine during agent enrollment. When a rogue or man-in-the-middle manager returns a malformed key with fewer than four space-separated fields, OS_StrBreak() leaves the missin...

CVE-2026-54084 Wazuh agent enrollment NULL pointer dereference via malformed manager response

Wazuh is an open-source security platform providing unified XDR and SIEM protection for endpoints and cloud workloads. In versions 4.0.0 through 4.14.6, a malicious or man-in-the-middle enrollment manager can crash a Wazuh agent during enrollment by returning a malformed key response with fewer...

CVE-2026-54084

Wazuh is an open-source security platform providing unified XDR and SIEM protection for endpoints and cloud workloads. In versions 4.0.0 through 4.14.6, a malicious or man-in-the-middle enrollment manager can crash a Wazuh agent during enrollment by returning a malformed key response with fewer...