EUVD-2026-66586

In the Linux kernel, the following vulnerability has been resolved: ovpn: fix NULL dereference when killing missing key ovpncryptokillkey assumes both crypto slots are populated and dereferences each slot before checking it. That is not guaranteed: a peer can have only one installed key, and the...

cve-2026-23398-poc

Lab: CVE-2026-23398 ICMP / ipnopmtudisc=3 Lab riproducibile per il bug del kernel Linux in icmptagvalidation dereferenziamento NULL quando net.ipv4.ipnopmtudisc = 3 e arriva un ICMP Fragmentation Needed il cui header IPv4 interno citato utilizza un numero di protocollo senza handler in inetprotos...

CVE-2026-80520

In the Linux kernel, the following vulnerability has been resolved: ovpn: fix NULL dereference when killing missing key ovpncryptokillkey assumes both crypto slots are populated and dereferences each slot before checking it. That is not guaranteed: a peer can have only one installed key, and the...

AZL-97746 CVE-2026-74740 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: net/sched: actapi: fix TOCTOU NULL deref on a-gotochain tcfactionexec handles TCACTGOTOCHAIN by first checking rcuaccesspointera-gotochain and then calling tcfactiongotochainexec, which does a second, independent...

CVE-2026-80564

This Linux kernel vulnerability affects the gve (Google Virtual Ethernet) driver. The root cause is a missing implementation of the adjfine PTP operation , which leads to a NULL pointer dereference in ptp_clock_adjtime. The bug can be triggered from usermode via sudo ./testptp -d /dev/ptp0 -f 0, ...

CVE-2026-80524 optee: ffa: Add NULL check in optee_ffa_lend_protmem

In the Linux kernel, the following vulnerability has been resolved: optee: ffa: Add NULL check in opteeffalendprotmem Sashiko locally reports a possible null dereference under memory pressure due to the lack of validation of the allocated pointer. Fix that by adding the missing check...

CVE-2026-80524

This vulnerability affects the Linux kernel in the OP-TEE FFA driver, specifically the optee_ffa_lend_protmem function. A NULL pointer dereference can occur under memory pressure because the allocated pointer is not validated before use. The fix adds the missing NULL check before dereferencing. N...

CVE-2026-80520 ovpn: fix NULL dereference when killing missing key

In the Linux kernel, the following vulnerability has been resolved: ovpn: fix NULL dereference when killing missing key ovpncryptokillkey assumes both crypto slots are populated and dereferences each slot before checking it. That is not guaranteed: a peer can have only one installed key, and the...

CVE-2026-80520

A NULL pointer dereference in the Linux kernel's ovpn (OpenVPN) module can lead to a denial of service (CVSS 3.1: 7.5, HIGH). The function ovpn_crypto_kill_key assumes both crypto slots are populated and dereferences each before checking for NULL. Since a peer can have only one installed key, the...

CVE-2026-80520 ovpn: fix NULL dereference when killing missing key

In the Linux kernel, the following vulnerability has been resolved: ovpn: fix NULL dereference when killing missing key ovpncryptokillkey assumes both crypto slots are populated and dereferences each slot before checking it. That is not guaranteed: a peer can have only one installed key, and the...

CVE-2026-74740 net/sched: act_api: fix TOCTOU NULL deref on a->goto_chain

In the Linux kernel, the following vulnerability has been resolved: net/sched: actapi: fix TOCTOU NULL deref on a-gotochain tcfactionexec handles TCACTGOTOCHAIN by first checking rcuaccesspointera-gotochain and then calling tcfactiongotochainexec, which does a second, independent...

MiracleLinux 8 : 389-ds:1.4 (AXSA:2026-1661:01)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1661:01 advisory. 389-ds-base: 389-ds-base: pre-auth LDAP filter injection in CleanAllRUV status check CVE-2026-11770 389-ds-base: 389-ds-base: NULL pointer dereferen...

Linux Distros Unpatched Vulnerability : CVE-2026-80520

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ovpn: fix NULL dereference when killing missing key ovpncryptokillkey assumes both crypto slots are populated and dereferences each slot before checking it. Tha...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098802)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098802 advisory. In the Linux kernel, the following vulnerability has been resolved: net/sched: schqfq: Fix race condition on qfqaggregate A race condition can occur when 'agg' is...

PT-2026-82191

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the cs40l50 add function where custom data from an FF PERIODIC or FF CUSTOM effect is copied from user space via EVIOCSFF without sufficient validation of the custom l...

PT-2026-82140

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A null dereference may occur under memory pressure due to missing validation of an allocated pointer within the optee ffa lend protmem function. A null dereference happens when a program...

PT-2026-82120

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A Time-of-Check to Time-of-Use TOCTOU race condition exists in the tcf action exec function when handling TC ACT GOTO CHAIN. The function performs an initial check of the a-goto chain...

Linux Distros Unpatched Vulnerability : CVE-2026-74740

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net/sched: actapi: fix TOCTOU NULL deref on a-gotochain tcfactionexec handles TCACTGOTOCHAIN by first checking rcuaccesspointera-gotochain and then calling...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098793)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098793 advisory. In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Fix null deref on srq-rq.queue after resize failure A NULL pointer dereference can occu...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098710)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098710 advisory. In the Linux kernel, the following vulnerability has been resolved: NFSD: fix race between nfsd registration and exportsproc As of now nfsd calls...