AZL-100028 CVE-2026-78130 affecting package strongswan 5.9.14-10

strongSwan 4.2.0 through 6.0.7 has a NULL pointer dereference in the x509 plugin's attribute certificate parser...

CVE-2021-24086

CVE-2021-24086 これは、Microsoftが2021年2月に修正したtcpip.sysにおけるNULLデリファレンスの脆弱性CVE-2021-24086（「Windows TCP/IP サービス拒否の脆弱性」）の概念実証（PoC）です。このツイートによると、脆弱性は@piazztによって発見されました。IPv6経由で悪意のあるUDPパケットを送信することで、リモートからトリガー可能です。 Microsoftのブログはこちらで読めます：Multiple Security Updates Affecting TCP/IP: CVE-2021-24074,...

PT-2026-90308

In the Linux kernel, the following vulnerability has been resolved: accel/rocket: fix NULL dereference and integer overflow in rocket job push rocket job push allocates a temporary array to hold all input and output GEM object pointers: bos = kvmalloc arrayjob-in bo count + job-out bo count,...

PT-2026-90114

In the Linux kernel, the following vulnerability has been resolved: net/smc: do not dereference an unset send buffer on the SMC-D teardown path smc close stream wait calls smc tx prepared sends from inside its sk wait event condition, and sk wait event evaluates that condition once with the socke...

PT-2026-90395

In the Linux kernel, the following vulnerability has been resolved: nfsd: fix null dereference in nfsd4 setattr for deleg timestamp attrs When a SETATTR request includes FATTR4 WORD2 TIME DELEG ACCESS or FATTR4 WORD2 TIME DELEG MODIFY in the attribute bitmap, nfsd4 setattr sets deleg attrs=true a...

PT-2026-90263

In the Linux kernel, the following vulnerability has been resolved: SUNRPC: Check svc pool percpu counter allocation svc create initializes three per-pool percpu counter stats and ignores every return value. On SMP, percpu counter init fails when alloc percpu gfp cannot satisfy the allocation,...

SUSE SLED15: libopenssl-3-devel / libopenssl-3-fips-provider / etc (SUSE-SU-2026:3835-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3835-1 advisory. OpenSSL is updated to 3.5.0 in SLE-15-SP7: jscPED-16072 Enables Post-Quantum Cryptography PQC TLS support...

PT-2026-90222

In the Linux kernel, the following vulnerability has been resolved: RDMA/uverbs: Add UVERBS ATTR UHW to UVERBS METHOD REG MR The original commit missed that three drivers mthca, irdma, siw have UHW data associated with reg mr that cannot be passed through the ioctl. They also assume that the udat...

PT-2026-90193

In the Linux kernel, the following vulnerability has been resolved: sctp: fix NULL deref on untransmitted RECONF completion sctp process strreset outreq, sctp process strreset addstrm out and sctp process strreset resp complete a pending stream reconfiguration request by stopping the reconf timer...

PT-2026-90286

In the Linux kernel, the following vulnerability has been resolved: cxl/mce: Make the MCE notifier per-region Flavien Solt reported lifetime issues with the CXL MCE notifier, which can lead to NULL dereferences and use-after-free in the MCE handler. The notifier was registered per memory device a...

PT-2026-90425

In the Linux kernel, the following vulnerability has been resolved: lockd, nfsd: RCU-protect nlmsvc ops dispatch nlmsvc ops is published by nfsd lockd init and cleared by nfsd lockd shutdown with plain stores, while lockd dereferences it unguarded from dispatch sites in fs/lockd/svcsubs.c. The...

PT-2026-90378

In the Linux kernel, the following vulnerability has been resolved: NFSD: Prevent lock owner use-after-free during client teardown destroy client releases a client's open owners, but a lock owner whose only reference is a blocked lock nbl stays on cl ownerstr hashtbl. client has state does not...

PT-2026-90086

In the Linux kernel, the following vulnerability has been resolved: dm-pcache: only hand out initialized cache segments get cache segment scans the segment map up to cache-n segs, the physical device segment count, but cache segs init only initializes the first cache info-n segs segments. A craft...

PT-2026-90200

In the Linux kernel, the following vulnerability has been resolved: lockd: fix NULL dereference on lockowner allocation failure nlmclnt locks init private installs NLM file lock operations even when nlmclnt find lockowner fails to allocate a lockowner. nlmclnt proc then returns -ENOMEM, but the V...

PT-2026-90233

In the Linux kernel, the following vulnerability has been resolved: sched ext: Fix rq-core pick corruption under core scheduling Core scheduling's pick next task picks what to run on every SMT sibling of the core in a single pass under the shared core-wide rq lock. The selection state is consiste...

SMBGhost-SMBleed-scanner

SMBGhost CVE-2020-0796 および SMBleed CVE-2020-1206 スキャナー c 2020 ZecOps, Inc. - https://www.zecops.com - 攻撃者の過ちを見つける 企業環境での教育およびテスト目的のみを意図しています。 ZecOps は本コードに関して一切の責任を負いません。自己責任でご使用ください。 サーバー、エンドポイント、モバイルデバイス向けのエージェントレス DFIR ツールにご興味がある場合は、[email protected] までお問い合わせください。これらのツールは...

SUSE-SU-2026:3835-1 Security update for openssl, openssl-3

This update for openssl, openssl-3 fixes the following issues: OpenSSL is updated to 3.5.0 in SLE-15-SP7: jscPED-16072 Enables Post-Quantum Cryptography PQC TLS support Security issues fixed: CVE-2026-42764: NULL pointer dereference in QUIC server initial packet handling bsc1266347 CVE-2026-34182...

CVE-2026-45747

Suricata versions prior to 7.0.16 are affected by a null pointer dereference in the Lua TLS certificate information helper (TlsGetCertInfo). When a Lua script requests certificate details for TLS traffic where some fields are absent, Suricata can be crashed, resulting in a denial of service . The...

CVE-2026-45747 Suricata lua/tls: null dereference in TlsGetCertInfo

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to version 7.0.16, the Lua TLS certificate information helper could dereference NULL certificate fields when a Lua script requested certificate information for TLS traffic...

CVE-2026-45747 Suricata lua/tls: null dereference in TlsGetCertInfo

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to version 7.0.16, the Lua TLS certificate information helper could dereference NULL certificate fields when a Lua script requested certificate information for TLS traffic...