CVE-2026-74741

CVE-2026-74741 is a NULL pointer dereference in the Linux kernel's ngbe network driver, occurring in the non-MSI-X interrupt enabling path. When the driver operates in legacy INTx or single MSI mode, the wx->msix_entry pointer is not allocated or initialized, so calling NGBE_INTR_MISC(wx) dere...

CVE-2026-74741 net: ngbe: fix NULL pointer dereference in non-MSI-X interrupt enabling

In the Linux kernel, the following vulnerability has been resolved: net: ngbe: fix NULL pointer dereference in non-MSI-X interrupt enabling In non-MSI-X mode such as legacy INTx or single MSI, wx-msixentry is not allocated or initialized. Calling NGBEINTRMISCwx dereferences wx-msixentry-entry,...

CVE-2026-74741 net: ngbe: fix NULL pointer dereference in non-MSI-X interrupt enabling

In the Linux kernel, the following vulnerability has been resolved: net: ngbe: fix NULL pointer dereference in non-MSI-X interrupt enabling In non-MSI-X mode such as legacy INTx or single MSI, wx-msixentry is not allocated or initialized. Calling NGBEINTRMISCwx dereferences wx-msixentry-entry,...

CVE-2026-74734 firewire: ohci: fix NULL pointer dereference in ar_context_release

In the Linux kernel, the following vulnerability has been resolved: firewire: ohci: fix NULL pointer dereference in arcontextrelease During the error handling path of the driver's probe function, a NULL pointer dereference can occur in arcontextrelease. When pciprobe fails early e.g., if...

CVE-2026-74734

A NULL pointer dereference in the Linux kernel's firewire/ohci driver can crash the kernel. During early probe failure (e.g., pcim_enable_device() or MMIO mapping failure), the devres cleanup calls ar_context_release(), which dereferences ctx->ohci before verifying the context was ever initial...

EUVD-2026-66752

In Stomper 5e2741e when a client sends a SEND frame missing the destination header field, the server triggers a null pointer dereference or access to invalid memory while processing the frame, causing the process to crash...

CVE-2026-26449

In Stomper 5e2741e when a client sends a SEND frame missing the destination header field, the server triggers a null pointer dereference or access to invalid memory while processing the frame, causing the process to crash...

PT-2026-82193

Name of the Vulnerable Software and Affected Versions Linux Kernel affected versions not specified Description A NULL pointer dereference exists in the drm/panthor component. The function panthor fw load section entry fails to handle zero-sized firmware sections correctly by skipping the creation...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-099014)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099014 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: gadget: fecm: Refactor bind path to use free After an bind/unbind cycle, the ecm-notifyreq i...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098846)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098846 advisory. In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Fix mlx5pollone curqp update flow When curqp isn't NULL, in order to avoid fetching th...

Linux Distros Unpatched Vulnerability : CVE-2026-74741

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: ngbe: fix NULL pointer dereference in non-MSI-X interrupt enabling In non-MSI-X mode such as legacy INTx or single MSI, wx-msixentry is not allocated or...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098822)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098822 advisory. In the Linux kernel, the following vulnerability has been resolved: net/sched: clsflow: fix NULL pointer dereference on shared blocks flowchange calls tcfblockq and...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098719)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098719 advisory. In the Linux kernel, the following vulnerability has been resolved: crypto: authencesn - reject too-short AAD assoclen8 to match ESP/ESN spec authencesn assumes an...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098951)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098951 advisory. In the Linux kernel, the following vulnerability has been resolved: libceph: Prevent potential null-ptr-deref in cephhandleauthreply If a message of type...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098816)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098816 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: gadget: facm: Refactor bind path to use free After an bind/unbind cycle, the acm-notifyreq i...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098699)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098699 advisory. In the Linux kernel, the following vulnerability has been resolved: net: Fix null-ptr-deref by socklockinitclassandname and rmmod. When I ran the repro 0 and waited...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098696)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098696 advisory. In the Linux kernel, the following vulnerability has been resolved: tipc: fix null-ptr-deref when acquiring remote ip of ethernet bearer The reproduction steps: 1...

PT-2026-82121

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference occurs in the ngbe driver during non-MSI-X interrupt enabling, such as in legacy INTx or single MSI modes. The issue arises because wx-msix entry is not...

CVE-2026-26449

Stomper (commit 5e2741e) is vulnerable to a null pointer dereference when a client sends a STOMP SEND frame missing the destination header field. The server crashes while processing the malformed frame, resulting in a denial of service. The CVSS 3.1 score is 7.5 (HIGH) with a vector of AV:N/AC:L/...

PT-2026-82180

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference occurs in the gve driver due to a missing implementation of the adjfine function. This issue can be triggered from usermode through the ptp clock adjtime...