Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from an unchecked kasprintf return value that could lead to a null pointer dereference...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from an attempt to free socdts after allocsocdts fails, which could result in a null pointer dereference...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from the replaceatomicwriteblock function of f2fs not checking for null pointers, which could lead to null pointer...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the removal of KVMTE support, which could lead to null pointer dereferencing...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from a null pointer dereference that could cause a system crash...

PT-2025-54078

In the Linux kernel, the following vulnerability has been resolved: bus: mhi: ep: Only send -ENOTCONN status if client driver is available For the STOP and RESET commands, only send the channel disconnect status -ENOTCONN if client driver is available. Otherwise, it will result in null pointer...

PT-2025-54093

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel’s fs/sysv component that could lead to a null pointer dereference. The sb getblk function, when called with inode-i sb and parent, may return a null...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992598)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992598 advisory. In the Linux kernel, the following vulnerability has been resolved: xfrm: add NULL check in xfrmupdateaeparams Normally, x-replayesn and x-preplayesn should be...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992562)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992562 advisory. In the Linux kernel, the following vulnerability has been resolved: media: rc: gpio-ir-recv: add remove function In case runtime PM is enabled, do runtime PM clean u...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992409)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992409 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/vkms: Fix null-ptr-deref in vkmsrelease A null-ptr-deref is triggered when it tries to destro...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-992393)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992393 advisory. In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix sysfs interface lifetime The current nilfs2 sysfs support has issues with the timing ...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992201)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992201 advisory. In the Linux kernel, the following vulnerability has been resolved: net/tunnel: wait until all skuserdata reader finish before releasing the sock There is a race...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992263)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992263 advisory. In the Linux kernel, the following vulnerability has been resolved: HID: steam: Prevent NULL pointer dereference in steamrecv,sendreport It is possible for a malicio...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992337)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992337 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: ucsi: Fix NULL pointer deref in ucsiconnectorchange When ucsiinit fails, ucsi-connector is...

CVE-2025-15156

A flaw has been found in omec-project UPF up to 2.1.3-dev. This affects the function handleSessionEstablishmentRequest of the file /pfcpiface/pfcpiface/messagessession.go of the component PFCP Session Establishment Request Handler. This manipulation causes null pointer dereference. The attack may...

NULL Pointer Dereference

Overview Affected versions of this package are vulnerable to NULL Pointer Dereference via the dabitags function in the cp-demangle.c file. An attacker can cause the application to crash or become unresponsive by submitting a specially crafted PE file. Remediation There is no fixed version for...

CVE-2025-14180

A flaw was found in PHP. When the PDO PHP Data Objects PostgreSQL driver is configured with PDO::ATTREMULATEPREPARES enabled, a remote attacker can exploit a vulnerability by providing an invalid character sequence within a prepared statement parameter. This can cause a null pointer dereference,...

Debian dla-4424 : libopenjp2-7 - security update

The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dla-4424 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4424-1 [email protected] https://www.debian.org/lts/security/...

CVE-2025-15156 omec-project UPF PFCP Session Establishment Request messages_session.go handleSessionEstablishmentRequest null pointer dereference

A flaw has been found in omec-project UPF up to 2.1.3-dev. This affects the function handleSessionEstablishmentRequest of the file /pfcpiface/pfcpiface/messagessession.go of the component PFCP Session Establishment Request Handler. This manipulation causes null pointer dereference. The attack may...

CVE-2025-14180

In PHP versions 8.1. before 8.1.34, 8.2. before 8.2.30, 8.3. before 8.3.29, 8.4. before 8.4.16, 8.5. before 8.5.1 when using the PDO PostgreSQL driver with PDO::ATTREMULATEPREPARES enabled, an invalid character sequence such as \x99 in a prepared statement parameter may cause the quoting function...