CVE-2026-75618 RTSP Null Pointer Dereference Denial-of-Service Vulnerability on TP-Link Tapo C100 and C101

Tapo C100/C101 V5 contains a null pointer dereference vulnerability in the RTSP service. An attacker on the local network can send specially crafted requests that cause the service to dereference an invalid pointer, resulting in a service crash and device reboot. Successful exploitation can disru...

CVE-2026-72468

A flaw was found in the Linux kernel's xprtrdma component. A local administrator can exploit a race condition during an NFS/RDMA mount operation against RDMA device removal. This can lead to a null pointer dereference, causing the kernel to crash and resulting in a Denial of Service DoS...

CVE-2026-74571

A flaw was found in the Linux kernel's btrfs filesystem. When mounting a btrfs filesystem with the rescue=ibadroots option after corrupting the block group tree root or raid stripe tree root, the system attempts to update the global block reserve. This process dereferences a missing root pointer,...

CVE-2026-72453

A flaw was found in the Linux kernel's regcache mechanism. During initialization, an error in a specific callback function cacheops-populate can have its error code overwritten by a subsequent exit routine. This masks the original error, potentially causing the system to attempt operations on...

CVE-2026-72467

A flaw was found in the Linux kernel's xprtrdma module. The system fails to properly check the return value of frwrwpcreate, which is responsible for creating a Memory Region. If this creation fails, a subsequent Network File System NFS over Remote Direct Memory Access RDMA read operation with an...

CVE-2026-72392

A flaw was found in the Linux kernel's IPv6 networking component. A vulnerability exists where a NULL pointer dereference can occur in the fib6walkcontinue function during a multi-batch dump operation. This issue arises when a concurrent table insertion shifts existing entries, causing an incorre...

CVE-2026-74461

A flaw was found in the Linux kernel, specifically within the i2c: imx driver. This vulnerability occurs due to a timing issue during device unregistration, where a critical pointer is cleared before a related timer is properly canceled. If a pending interrupt triggers the timer after the pointer...

CVE-2026-74477

A flaw was found in the Linux kernel's uprobes mechanism. A local attacker could exploit a race condition by forking a task with a pending uretprobe while another CPU unregisters the uprobe. This could lead to a NULL pointer dereference in the hprobeexpire function, causing a kernel oops and...

CVE-2026-72362

A flaw was found in the Linux kernel's drm/xe/pt module. This vulnerability arises when the page-table walk framework provides a null pointer for unpopulated entries, and the xeptzapptesentry function attempts to access this null pointer without prior validation. This improper handling can lead t...

CVE-2026-72346

A flaw was found in the Linux kernel's bitland-mifs-wmi driver. During suspend and resume operations, an uninitialized pointer can be passed to a function, leading to a NULL pointer dereference. This can cause a kernel crash, resulting in a denial of service DoS by halting the system's suspend...

CVE-2026-72344

A flaw was found in the Linux kernel's net/mlx5e driver. When the mlx5laggetdevseq function encounters an error, such as a peer not being in the Link Aggregation Group LAG or no master device being marked, the system attempts to clean up peer flows without proper validation. This improper handlin...

CVE-2026-72341

A flaw was found in the Linux kernel's net/mlx5e component. A local attacker could exploit a race condition during the publication of channel statistics. On weakly-ordered architectures, this could lead to a null pointer dereference, causing a system crash and a denial of service...

CVE-2026-16817

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to a NULL pointer dereference...

CVE-2026-16817 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to a NULL pointer dereference...

EUVD-2026-62527

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to a NULL pointer dereference...

CVE-2026-16817

IBM AIX 7.2/7.3 and PowerVM VIOS 4.1 are vulnerable to a remote NULL pointer dereference, allowing unauthenticated attackers to cause denial of service (CVSS 7.5 HIGH). No affected component, patch version, or exploit details are provided in the documents.

MINI-J86M-HVPX-HVW6

Bulletin has no description...

MINI-V2CP-4GMR-W3PR

Bulletin has no description...

MINI-MCWM-R84M-MVWM

Bulletin has no description...

CVE-2026-74403

A flaw was found in the Linux kernel's Cryptographic Co-processor CCP driver. Under memory pressure, if a page allocation fails, the driver incorrectly processes the allocation result. This can lead to the dereferencing of an invalid memory address, potentially causing a system crash or other...