66537 matches found
PT-2026-72740
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci qca: fix NULL pointer dereference in qca setup for non-serdev device hu-serdev is NULL for hci uart attached via non-serdev paths, but qca setup unconditionally calls serdev device get drvdatahu-serdev and...
Linux Distros Unpatched Vulnerability : CVE-2026-72373
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - afs: Fix missing NULL pointer check in afsbreaksomecallbacks Fix afsbreaksomecallbacks to check to see if afslookupvolumercu returned NULL e.g. the specified...
Linux Distros Unpatched Vulnerability : CVE-2026-74407
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: ath11k: cancel SSR work items during PCI shutdown A reboot can crash the kernel if it overlaps with WLAN firmware crash recovery SSR. The crash is a NULL...
Linux Distros Unpatched Vulnerability : CVE-2026-72242
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - selinux: avoid sksocket dereference in selinuxsctpbindconnect selinuxsctpbindconnect dereferences sk-sksocket to pass a struct socket to selinuxsocketbind and...
Linux Distros Unpatched Vulnerability : CVE-2026-74441
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - usb: typec: ucsi: Fix race condition and ordering in port unregistration A synchronization issue exists during port unregistration where pending partner work...
Linux Distros Unpatched Vulnerability : CVE-2026-74379
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - dax/kmem: account for partial discontiguous resource upon removal When devdaxkmemprobe partially succeeds at least one range is mapped but a subsequent range...
SUSE CVE-2026-68275
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: check amdgpuvmbofind result in GETMAPPINGINFO The AMDGPUGEMOPGETMAPPINGINFO path of amdgpugemopioctl looks up the bova for the buffer object in the caller's VM via amdgpuvmbofind, but uses the returned pointer without...
SUSE CVE-2026-68300
In the Linux kernel, the following vulnerability has been resolved: sctp: auth: verify auth requirement when authchunk is NULL sctpauthchunkverify returns true unconditionally when chunk-authchunk is NULL, silently skipping authentication. This is incorrect when: 1. skbclone failed in the BH...
MINI-HVHG-5WJ7-93H6
Bulletin has no description...
Oracle Linux 10 : kernel (ELSA-2026-36956)
The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-36956 advisory. - crypto: ccp - copy IV using skcipher ivsize CKI Backport Bot RHEL-188463 CVE-2026-53016 - futex/requeue: Revert 'Prevent NULL pointer dereference i...
The vulnerability of the ksmbd component in the Linux operating system’s kernel allows a hacker to trigger a service failure.
The vulnerability of the ksmbd component in the Linux operating system’s kernel is related to the lack of data security mechanisms. Exploiting this vulnerability can allow an attacker to cause service failures...
The vulnerability in the `virt/kvm/eventfd.c` component of the Linux operating system allows a hacker to trigger a service failure.
The vulnerability in the virt/kvm/eventfd.c component of the Linux operating system is related to pointer dereferencing errors. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability in the core/sock.c component of the Linux operating system allows a hacker to cause a service failure.
The vulnerability in the core/sock.c component of the Linux operating system is related to pointer dereferencing errors. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability in the `sched/act_ife.c` component of the Linux operating system allows a hacker to trigger a service failure.
The vulnerability in the schedd/actife.c component of the Linux operating system is related to pointer dereferencing errors. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the slimbus/core.c component in the Linux operating system’s kernel allows a hacker to cause a service failure.
The vulnerability of the slimbus/core.c component in the Linux operating system is related to errors during resource release. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the net/sctp/sm_statefuns.c component in the Linux operating system allows a hacker to trigger a service failure.
The vulnerability of the net/sctp/smstatefuns.c component in the Linux operating system is related to pointer dereferencing errors. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability in the `drivers/net/bonding/bond_main.c` component of the Linux operating system allows a hacker to cause a service failure.
The vulnerability in the drivers/net/bonding/bondmain.c component of the Linux operating system is related to pointer dereferencing errors. Exploiting this vulnerability can allow an attacker to cause a service failure...
CVE-2026-35590
A flaw was found in libvips. The EXIF decoder did not properly verify the range of EXIF tag groups, which could lead to a null pointer dereference. A local user could exploit this by providing specially crafted EXIF data, causing the application to crash and resulting in a denial of service...
CVE-2026-55984
Null Pointer Dereference in AddTime API Causes Authenticated Denial of Service...
CVE-2026-55984
CVE-2026-55984 is a vulnerability in Gitea involving a null pointer dereference in the AddTime API that allows an authenticated attacker to cause a Denial of Service. The issue is triggered by the AddTime function and is documented with a PoC/exploitation note in metrics. Affected product: Gitea ...