PT-2026-106643

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.2.10-1.1 Description A NULL-pointer dereference exists in the ALSA PCM component. The snd pcm timer init function calls snd device register to add a new snd timer structure to the global timer list before...

PT-2026-106664

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.2.10-1.1 Description An issue exists in the mac80211 wireless driver where the ieee80211 stop mesh function fails to properly abort a Channel Switch Announcement CSA when leaving a mesh network. Because the...

PT-2026-106675

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.2.10-1.1 Description A crash occurs in mac80211 when the cfg80211 calculate bi data function calls rdev get radio mask using the wdev-netdev variable while it is NULL. This happens specifically with wireless...

PT-2026-106597

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.2.10-1.1 Description A null pointer dereference occurs in the Linux kernel when a module is unloaded while a perf connection is active. The function pmu detach event sets the event-pmu pointer to null, which...

Linux Distros Unpatched Vulnerability : CVE-2026-98358

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - IB/iser: reject a remote invalidation of an unregistered direction A write command whose data is sent entirely as immediate data is not registered...

Linux Distros Unpatched Vulnerability : CVE-2026-98314

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ALSA: pcm: set timer-privatedata before registering the PCM timer sndpcmtimerinit calls snddeviceregister to link the new struct sndtimer into the global timer...

SUSE CVE-2026-66859

NULL Pointer Dereference, Use of Uninitialized Variable vulnerability in Apache Thrift cglib bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

Security Bulletin: IBM Security QRadar Log Management AQL Plugin contains components with known vulnerabilities

Summary The product includes vulnerable components e.g., framework libraries that could be identified and exploited with automated tools. IBM Security QRadar Log Management AQL Plugin has addressed the applicable CVEs in an update. Vulnerability Details CVEID:CVE-2026-76905 DESCRIPTION: kin-opena...

Astra Linux – Vulnerability in exiv2

In Exiv2 0.26, there is a null pointer dereference in the Exiv2::DataValue::toLong function located in value.cpp. This issue is related to crafted metadata in a TIFF file...

Astra Linux – Vulnerability in Linux 5.10, Linux, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: Tracing: Fixed a null pointer dereference in the tracingerrlogopen function. This issue occurs when the function does not call seqopen if the file is opened only with write permissions. As a result, file-privatedata remains...

Astra Linux – Vulnerability in sane-backends

A NULL pointer dereferencing in the saneiepsonnetread function in SANE backends before version 1.0.30 allows a malicious device connected to the same local network as the victim to cause a denial of service, known as GHSL-2020-075...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: bareudp: A NULL pointer dereference was fixed in bareudpfillmetadatadst. The bareudpfillmetadatadst function passes bareudp-sock to udptunnel6dstlookup in the IPv6 path, without a NULL check. The socket is only created in...

Astra Linux – Vulnerability in Apache2

A NULL pointer dereferencing in the modauthnsocache in Apache HTTP Server 2.4.66 and earlier allows an unauthenticated remote user to crash a child process in a caching forward proxy configuration. Users are recommended to upgrade to version 2.4.67, which fixes this issue...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15

A race condition was detected in the Linux kernel’s sound/hda device driver, specifically in the sndhdacregmapsync function. This can lead to a null pointer dereferencing issue, potentially causing a kernel panic or a denial-of-service attack...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: fuac1legacy: remove broken string configfs attributes The UAC1STRATTRIBUTE macro defines configfs show/store handlers for the fnplay, fncap, and fncntl string options. The store function contains an inverted null che...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: ipv6: ioam: A NULL check should be added for the idev pointer in ipv6hopioam. Reported by Sashiko: The function ipv6hopioam accesses in6devgetskb-dev-cnf.ioam6enabled without validating the returned idev pointer. Since...

Astra Linux – Vulnerability found in Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: fs/ntfs3: Fixed a NULL pointer dereference in ‘niwrite inode’. Syzbot identified the following issue: Unable to handle a NULL pointer dereference at the virtual address 0000000000000016. Memory abort information: ESR =...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: nbd: The function genlunregisterfamily is called first in nbdcleanup. Otherwise, there may be a race between the removal of the module and the handling of the netlink command, which can lead to an oops as shown below: BUG: Kernel...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: mfd: davincivoicecodec: Fixed a possible nullptrderef issue in davincivcprobe. This issue could lead to a nullptrderef if using ‘res’, provided that platformgetresource returns NULL. Therefore, use ‘res’ after devmioremapresource...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: xprtrdma: Check frwrwpcreate during the connect process. frwrwpcreate creates a singleton Memory Region used to encode padding for Write chunks whose payload length is not XDR-aligned. In case of failure, a negative errno is...