CVE-2026-89994

A flaw was found in the Linux kernel's dmaengine: fsl-edma component. This vulnerability allows a local attacker to trigger a system crash, leading to a Denial of Service DoS. The flaw occurs because the fsl edma tracing events store a pointer in a ringbuffer that can become invalid before being...

CVE-2026-99069

A flaw was found in the Linux kernel's atiremote2 input driver. A local user can exploit this type confusion vulnerability to cause a Denial of Service DoS. The issue occurs because the driver's device attribute handlers improperly treat an interface pointer as a parent device pointer. By...

CVE-2026-99166

A flaw was found in the Linux kernel's Reliable Datagram Sockets RDS subsystem. When handling connection events on non-InfiniBand Remote Direct Memory Access RDMA devices, the kernel fails to initialize an internal transport pointer. A remote attacker can exploit this vulnerability by sending a...

CVE-2026-42057

A flaw was found in VTK. An attacker can cause a Denial of Service DoS by supplying a specially crafted PNG image file. When processed by the PNG reader component, the malformed input triggers an invalid pointer dereference, causing the application to crash...

RHEL 9 : Satellite 6.18 (RHSA-2026:92860)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:92860 advisory. openvox-agent: curl: Cookie injection via malicious HTTP server using super cookies CVE-2026-8924. openvox-agent: heap buffer overflow in C...

openssl: invalid pointer dereference in CMP server via crafted protectionAlg

A flaw was found in OpenSSL. A crafted CMP Certificate Management Protocol message can cause an invalid pointer dereference due to a missing type check in the password-based protection verification. A remote, unauthenticated attacker can crash applications acting as a CMP server or client,...

openssl: invalid pointer dereference in CMP server via crafted protectionAlg

A flaw was found in OpenSSL. A crafted CMP Certificate Management Protocol message can cause an invalid pointer dereference due to a missing type check in the password-based protection verification. A remote, unauthenticated attacker can crash applications acting as a CMP server or client,...

openssl: invalid pointer dereference in CMP server via crafted protectionAlg

A flaw was found in OpenSSL. A crafted CMP Certificate Management Protocol message can cause an invalid pointer dereference due to a missing type check in the password-based protection verification. A remote, unauthenticated attacker can crash applications acting as a CMP server or client,...

CVE-2026-41216

An invalid pointer dereference vulnerability exists in the vtkPNGReader::ExecuteInformation functionality of vtk 9.6. A specially crafted .png file can lead to a denial of service. An attacker can provide a malicious file to trigger this vulnerability...

CVE-2026-41216

An invalid pointer dereference vulnerability exists in the vtkPNGReader::ExecuteInformation functionality of vtk version 9.6 . The root cause is a misuse of setjmp and longjmp within vtkPNGReader::vtkInternals::HandleLibPngError. When a malformed PNG file triggers a longjmp, the execution returns...

EUVD-2026-113326

An invalid pointer dereference vulnerability exists in the vtkPNGReader::ExecuteInformation functionality of vtk 9.6. A specially crafted .png file can lead to a denial of service. An attacker can provide a malicious file to trigger this vulnerability...

CVE-2026-98979

A flaw was found in the Linux kernel. The kernel improperly allows automount operations beneath internal mount points that are not associated with a mount namespace. A local user can exploit this vulnerability by accessing an affected mount path, causing an invalid pointer dereference. This flaw...

vtk vtkPNGReader::ExecuteInformation invalid pointer dereference vulnerability

Summary A invalid pointer dereference vulnerability exists in the vtkPNGReader::ExecuteInformation functionality of vtk versions: 9.6. A specially crafted .png file can lead to a denial of service. An attacker can provide a malicious file to trigger this vulnerability. Confirmed Vulnerable Versio...

CVE-2026-41216: vtk: An invalid pointer dereference vulnerability exists in the vtkPNGReader::ExecuteInformation functionality of vtk 9.6

An invalid pointer dereference vulnerability exists in the vtkPNGReader::ExecuteInformation functionality of vtk 9.6. A specially crafted .png file can lead to a denial of service. An attacker can provide a malicious file to trigger this vulnerability...

CVE-2026-42057: vtk: An invalid pointer dereference vulnerability exists in the vtkPNGReader::vtkPNGReaderUpdate2 functionality of vtk 9.6

An invalid pointer dereference vulnerability exists in the vtkPNGReader::vtkPNGReaderUpdate2 functionality of vtk 9.6. A specially crafted .png file can lead to a denial of service. An attacker can provide a malicious file to trigger this vulnerability...

PT-2026-132775

An invalid pointer dereference vulnerability exists in the vtkPNGReader::vtkPNGReaderUpdate2 functionality of vtk 9.6. A specially crafted .png file can lead to a denial of service. An attacker can provide a malicious file to trigger this vulnerability...

VTK resource management error vulnerability

VTK version 9.6 contains a resource management error vulnerability. This vulnerability stems from an invalid pointer dereference in the vtkPNGReader::ExecuteInformation function; specially crafted .png files can lead to a denial of service...

PT-2026-132774

An invalid pointer dereference vulnerability exists in the vtkPNGReader::ExecuteInformation functionality of vtk 9.6. A specially crafted .png file can lead to a denial of service. An attacker can provide a malicious file to trigger this vulnerability...

vtk vtkPNGReader::vtkPNGReaderUpdate2 invalid pointer dereference vulnerability

Summary A invalid pointer dereference vulnerability exists in the vtkPNGReader::vtkPNGReaderUpdate2 functionality of vtk versions: 9.6. A specially crafted .png file can lead to a denial of service. An attacker can provide a malicious file to trigger this vulnerability. Confirmed Vulnerable...

CVE-2026-98911

A flaw was found in the Linux kernel's dpaa2-switch network driver. When an error occurs during frame reception, the driver improperly invokes a cleanup routine intended for transmit buffers that expects a valid socket buffer structure. An attacker capable of sending traffic that triggers an erro...