CVE-2026-88373

libde265 commit 4d45a6b contains a NULL pointer dereference vulnerability in the NAL parsing path. When de265pushNAL is called with a zero-length NAL unit, the resulting NALunit may retain a NULL backing buffer, which is subsequently passed as the destination argument to memcpy in NALunit::setdat...

CVE-2026-88384

OpenEXR 3.4.14 contains a NULL Pointer Dereference in the C++ attribute parsing path. A specially crafted EXR file containing an unknown-type attribute with dataSize set to zero causes the parser to create an opaque attribute with a NULL packeddata pointer. The OpaqueAttribute constructor passes...

PT-2026-97950

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description In the Linux kernel, the functions eswin clk register pll and eswin register clkdiv declare a clk init data structure on the stack but only initialize specific fields, namely parent data...

PT-2026-97960

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description In the tps6594 regulator probe function, the multi-phase configuration loop fails to release node references acquired through of find node by name and of get parent. Specifically, the...

PT-2026-98138

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A null pointer dereference exists during the devcoredump cleanup process. In the xe devcoredump snapshot free function, the ss-gt variable may be NULL if the snapshot was not fully...

PT-2026-104969

In the Linux kernel, the following vulnerability has been resolved: smb: client: harden DFS cache against invalid target hints Currently, get tgt name returns ERR PTR-ENOENT when ce-tgthint is NULL, and dfs cache noreq update tgthint assumes ce-tgthint is always valid. In preparation for clearing...

Linux Distros Unpatched Vulnerability : CVE-2026-93825

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - spi: Add NULL check for spigetdeviceid in spigetdevicematchdata Prevent NULL pointer dereference when spigetdeviceid returns NULL, which can happen when using...

Linux Distros Unpatched Vulnerability : CVE-2026-93286

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: appletalk: fix NULL pointer dereference in aarpsendddp aarpsendddp calls atalkfinddevaddrdev in the LocalTalk fast path without checking for NULL. When the...

RHEL 9 : kernel (RHSA-2026:70459)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:70459 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: crypto: afalg - Disallow...

Linux Distros Unpatched Vulnerability : CVE-2026-93261

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - locking/lockdep: Fix NULL pointer dereference in locksetclass registerlockclass can return NULL when the lock class pool is exhausted, graphlock fails, or key...

PT-2026-98073

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A kernel NULL pointer dereference occurs in the ntfs3 file system when processing a corrupted image. The issue is triggered when system.ntfs attrib is toggled and subsequently system.dos...

PT-2026-104953

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: goku udc: avoid NULL deref of dev-driver in INT USBRESET log goku irq handles a number of bus events under a single ep0 path. It already guards the gadget driver suspend/resume callbacks against a NULL -driver: if...

ROS-20260924-73-0055

The vulnerability of the ntfsnew inode function in the fs/ntfs3/fsntfs.c file of the NTFS file system in the Linux operating system is related to the dereferencing of a NULL pointer. Exploiting this vulnerability could allow an attacker to cause service failures remotely...

CVE-2026-88384

OpenEXR 3.4.14 contains a NULL Pointer Dereference in the C++ attribute parsing path. A specially crafted EXR file containing an unknown-type attribute with dataSize set to zero causes the parser to create an opaque attribute with a NULL packeddata pointer. The OpaqueAttribute constructor passes...

CVE-2026-88384

The OpenEXR 3.4.14 library is vulnerable to a NULL Pointer Dereference within the C++ attribute parsing path. When processing a specially crafted EXR file that contains an unknown-type attribute with a dataSize of zero, the parser creates an opaque attribute with a NULL packed_data pointer . The ...

CVE-2026-88384

OpenEXR 3.4.14 contains a NULL Pointer Dereference in the C++ attribute parsing path. A specially crafted EXR file containing an unknown-type attribute with dataSize set to zero causes the parser to create an opaque attribute with a NULL packeddata pointer. The OpaqueAttribute constructor passes...

CVE-2026-93261: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: locking/lockdep: Fix NULL pointer dereference in locksetclass registerlockclass can return NULL when the lock class pool is exhausted, graphlock fails, or key validation fails. However, locksetclass uses the return value directly...

CVE-2026-93286: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: net: appletalk: fix NULL pointer dereference in aarpsendddp aarpsendddp calls atalkfinddevaddrdev in the LocalTalk fast path without checking for NULL. When the device has no AppleTalk interface configured dev-atalkptr == NULL,...

CVE-2026-93263: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: clk: eswin: Zero-initialize stack-allocated clkinitdata eswinclkregisterpll and eswinregisterclkdiv declare a struct clkinitdata on the stack and only initialize some of its fields parentdata respectively parenthws...

CVE-2026-88384: NULL Pointer Dereference

OpenEXR 3.4.14 contains a NULL Pointer Dereference in the C++ attribute parsing path. A specially crafted EXR file containing an unknown-type attribute with dataSize set to zero causes the parser to create an opaque attribute with a NULL packeddata pointer. The OpaqueAttribute constructor passes...