Lucene search
+L

64824 matches found

RedhatCVE
RedhatCVE
added 5 days ago4 views

CVE-2026-64288

A flaw was found in the kernel's Kernel-based Virtual Machine KVM component for ARM64 architectures. A race condition can occur during the invalidation of the virtual Nested Translation Cache VNCR pseudo-TLB when a virtual CPU vcpu is being brought online or offline. This can lead to a null point...

5.5CVSS5.8AI score0.00198EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added 5 days ago6 views

CVE-2026-64263

A flaw was found in the Linux kernel's fuse-uring component. This vulnerability arises from the incorrect handling of cancelled entries, which are moved to a list where a subsequent operation unconditionally attempts to access a null pointer. A local attacker could exploit this flaw to trigger a...

5.8AI score0.00198EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added 5 days ago6 views

CVE-2026-64404

A flaw was found in the Linux kernel's Bluetooth subsystem. A race condition exists in the isoconnbigsync function where a socket lock is temporarily released and re-acquired. During this window, the Bluetooth connection can be unexpectedly terminated. If the connection is torn down, the subseque...

5.5CVSS5.8AI score0.00168EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added 5 days ago4 views

CVE-2026-64297

A flaw was found in the Linux kernel. An unchecked return value in the moduleextendmaxpages function within the module decompression logic can lead to a null pointer dereference. This vulnerability can be triggered if memory allocation fails during module loading, resulting in a kernel oops. This...

5.5CVSS5.8AI score0.00206EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added 5 days ago10 views

CVE-2026-64482

A flaw was found in the Linux kernel's Advanced Linux Sound Architecture ALSA Gravis Ultrasound GUS driver. When memory allocation fails, the sndctlnew1 function can return a null value. The sndgf1pcmvolumecontrol function does not properly check for this null return, leading to a null pointer...

5.5CVSS5.8AI score0.00181EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added 5 days ago4 views

CVE-2026-64545

A flaw was found in the Linux kernel. The xdpmasterredirect function, which handles network packet redirection, does not properly check for a null pointer. This oversight allows a local attacker to trigger a null pointer dereference by sending a specially crafted XDP eXpress Data Path packet duri...

7.5CVSS5.7AI score0.00496EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added 5 days ago7 views

CVE-2026-64542

A flaw was found in the Linux kernel's IPv6 Neighbor Discovery NDISC component. An unprivileged user, operating within a network namespace, can trigger a null pointer dereference in the acceptuntrackedna function. This occurs due to a race condition where the inet6dev structure is re-fetched...

5.5CVSS5AI score0.00168EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 5 days ago10 views

Linux Distros Unpatched Vulnerability : CVE-2026-62432

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The EVTCHNOPexpandarray hypercall checks for whether FIFO event channels are enabled, but without holding the correct lock. It can race with EVTCHNOPreset,...

7.3CVSS5.9AI score0.00212EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
added 6 days ago4 views

CVE-2026-62432

A flaw was found in Xen. A timing issue, known as a race condition, exists in the event channel handling mechanism. This occurs when the system attempts to expand event channels without properly securing access, allowing another operation to interfere. This can lead to the system attempting to...

7.3CVSS5.8AI score0.00212EPSS
SaveExploits0References2
NVD
NVD
added 6 days ago8 views

CVE-2026-67184

TinyWeb through 0.0.8 contains a null pointer dereference vulnerability that allows unauthenticated remote attackers to crash worker processes by sending a malformed HTTP request line with an invalid version string. The HttpParser::execute function fails to allocate the Url object when version...

8.7CVSS0.00432EPSS
SaveExploits1References2
SUSE CVE
SUSE CVE
added 6 days ago5 views

SUSE CVE-2026-64538

In the Linux kernel, the following vulnerability has been resolved: ipv6: Fix null-ptr-deref in fib6nhmtuchange. fib6nhmtuchange re-fetches idev via in6devgetarg-dev and dereferences idev-cnf.mtu6 without a NULL check. addrconfifdown clears dev-ip6ptr with RCUINITPOINTER after rt6disableip has...

5.7AI score0.00176EPSS
SaveExploits0References2
CVE
CVE
added 6 days ago10 views

CVE-2026-67184

Summary: TinyWeb 0.0.8 and earlier are affected by a null pointer dereference due to a failure in HttpParser::execute() when parsing an HTTP request line with an invalid version. The code path leaves Url as NULL and then buildResponse() dereferences it without validating valid_requ, causing a SIG...

8.7CVSS5.9AI score0.00432EPSS
SaveExploits1References2
ATTACKERKB
ATTACKERKB
added 6 days ago5 views

CVE-2026-67184

TinyWeb through 0.0.8 contains a null pointer dereference vulnerability that allows unauthenticated remote attackers to crash worker processes by sending a malformed HTTP request line with an invalid version string. The HttpParser::execute function fails to allocate the Url object when version...

8.7CVSS5.9AI score0.00432EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
added 6 days ago33 views

CVE-2026-67184 TinyWeb 0.0.8 Null Pointer Dereference DoS via Malformed HTTP Request

TinyWeb through 0.0.8 contains a null pointer dereference vulnerability that allows unauthenticated remote attackers to crash worker processes by sending a malformed HTTP request line with an invalid version string. The HttpParser::execute function fails to allocate the Url object when version...

8.7CVSS0.00432EPSS
SaveExploits1References2
EUVD
EUVD
added 6 days ago11 views

EUVD-2026-49902

TinyWeb through 0.0.8 contains a null pointer dereference vulnerability that allows unauthenticated remote attackers to crash worker processes by sending a malformed HTTP request line with an invalid version string. The HttpParser::execute function fails to allocate the Url object when version...

8.7CVSS5.9AI score0.00432EPSS
SaveExploits1References2
RedhatCVE
RedhatCVE
added 6 days ago4 views

CVE-2026-64538

A flaw was found in the Linux kernel's IPv6 networking component. A null pointer dereference vulnerability exists in the fib6nhmtuchange function. This can occur when the idev in6device pointer is cleared during network interface shutdown, but the fib6nhmtuchange function attempts to dereference ...

5.3CVSS5.9AI score0.00176EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 6 days ago5 views

openssl: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing

A flaw was found in OpenSSL. A remote attacker could exploit this vulnerability by sending a specially crafted Cryptographic Message Syntax CMS EnvelopedData message. During the processing of a KeyTransportRecipientInfo with RSA-OAEP encryption, the system attempts to access an optional parameter...

7.5CVSS5.8AI score0.01027EPSS
SaveExploits0References10
NVD
NVD
added 6 days ago6 views

CVE-2026-62432

The EVTCHNOPexpandarray hypercall checks for whether FIFO event channels are enabled, but without holding the correct lock. It can race with EVTCHNOPreset, resulting in dereferencing a NULL pointer...

7.3CVSS0.00212EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
added 6 days ago4 views

CVE-2026-64234

A flaw was found in the Linux kernel's tty subsystem, specifically within the pchuart serial driver. This vulnerability occurs due to a missing check for the return value of dmaalloccoherent. An attacker could potentially exploit this to trigger a NULL pointer dereference in the dmahandlerx...

5.8AI score0.00165EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 6 days ago5 views

kernel: iommu/vt-d: Avoid NULL pointer dereference or refcount corruption

A flaw was found in the Linux kernel's Input-Output Memory Management Unit IOMMU virtualized direct memory access VT-d component. This vulnerability occurs when the system attempts to perform cleanup operations without a valid device identifier, leading to a null pointer dereference or incorrect...

8.8CVSS5.8AI score0.0013EPSS
SaveExploits0References5
Rows per page
Query Builder