CVE-2026-78126

CVE-2026-78126 affects strongSwan (an IKE/IPsec suite), versions 4.1.10 through 6.0.7 . The vulnerability is a NULL-pointer dereference in the eap-aka plugin triggered when processing an unexpected AKA-Synchronization-Failure message, which can result in a crash (denial of service). The CVSS 3.1 ...

CVE-2026-78126

strongSwan 4.1.10 through 6.0.7 allows a NULL pointer dereference in the eap-aka plugin...

CVE-2026-78126

strongSwan 4.1.10 through 6.0.7 allows a NULL pointer dereference in the eap-aka plugin...

CVE-2026-78126

strongSwan 4.1.10 through 6.0.7 allows a NULL pointer dereference in the eap-aka plugin...

EUVD-2026-75871

A NULL pointer dereference vulnerability exists in the Prism parser component of mruby 4.0.0. An attacker can provide a specially crafted Ruby source file that triggers the parser to pass a NULL pointer to nonnull string handling functions, resulting in undefined behavior and application crash...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-107326)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-107326 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths When the HBA is...

The vulnerability of the ctts_box_write() function in the isomedia/box_code_base.c file of the GPAC multimedia platform allows a violator to trigger a service failure.

The vulnerability of the cttsboxwrite function in the isomedia/boxcodebase.c file of the GPAC multimedia platform is related to the use of a zero pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

PT-2026-90395

In the Linux kernel, the following vulnerability has been resolved: nfsd: fix null dereference in nfsd4 setattr for deleg timestamp attrs When a SETATTR request includes FATTR4 WORD2 TIME DELEG ACCESS or FATTR4 WORD2 TIME DELEG MODIFY in the attribute bitmap, nfsd4 setattr sets deleg attrs=true a...

PT-2026-90221

In the Linux kernel, the following vulnerability has been resolved: RDMA/uverbs: Guard legacy bundles without method elm The legacy write path dispatches through a uverbs api write method, but the uverbs attr bundle passed to provider code does not have an ioctl method element. If malformed...

PT-2026-90227

In the Linux kernel, the following vulnerability has been resolved: qede: Fix NULL pointer dereference in TPA fragment processing Under memory pressure, the qede driver encounters NULL pointer dereferences when processing TPA continuation fragments. Commit 8a8633978b84 "qede: Add build skb...

Linux Distros Unpatched Vulnerability : CVE-2026-45747

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to version 7.0.16, the Lua TLS...

PT-2026-90477

In the Linux kernel, the following vulnerability has been resolved: apparmor: fix out-of-bounds write when null terminating a label vec aa vec unique null terminates at vecn - dups when VEC FLAG TERMINATE is passed. If the components are all distinct no duplicates are dropped, dups is 0 and the...

PT-2026-90433

In the Linux kernel, the following vulnerability has been resolved: zram: set default primary compressor in zram destroy comps Patch series "zram: fix zram issues reported by sashiko". Sashiko drove by and reported 1 a couple of zram issues: a possible BUG ON in zlib code due to missing winbits...

PT-2026-90260

In the Linux kernel, the following vulnerability has been resolved: SUNRPC: fix gssx dec option array error path bugs Four coupled defects in the gssx XDR option-array decoder make the error paths unsafe: a NULL deref in the caller, a refcount leak on the decoded group info, and a latent...

SUSE SLED15: libopenssl-3-devel / libopenssl-3-fips-provider / etc (SUSE-SU-2026:3835-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3835-1 advisory. OpenSSL is updated to 3.5.0 in SLE-15-SP7: jscPED-16072 Enables Post-Quantum Cryptography PQC TLS support...

AlmaLinux 10 : gstreamer1-plugins-base (ALSA-2026:66460)

The remote AlmaLinux 10 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:66460 advisory. gstreamer1-plugins-base: gstreamer: NULL/invalid-pointer dereference in gstrtspmessageparseauthcredentials when parsing a crafted Digest...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-107303)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-107303 advisory. In the Linux kernel, the following vulnerability has been resolved: driver: iio: add missing checks on iioinfo's callback access Some callbacks from iioinfo structur...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-107277)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-107277 advisory. In the Linux kernel, the following vulnerability has been resolved: btrfs: do not clean up repair bio if submit fails The submit helper will always run bioendio on t...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-107278)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-107278 advisory. In the Linux kernel, the following vulnerability has been resolved: driver core: fix potential NULL pointer dereference in devuevent If userspace reads uevent device...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-107289)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-107289 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Add null checker before passing variables Checks null pointer before passing...