Linux Distros Unpatched Vulnerability : CVE-2026-89963

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - powerpc/kexecfile: Fix null-ptr-def in extra size calculation A static Sashiko AI review identified a potential NULL pointer dereference in...

Linux Distros Unpatched Vulnerability : CVE-2026-90020

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - USB: gadget: fix NULL pointer dereference in gadgetdevioctl gadgetdevioctl reads dev-gadget before acquiring dev-lock, but dev-state is checked after acquiring...

Linux Distros Unpatched Vulnerability : CVE-2026-89874

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - media: v4l2-async: avoid deleting unlinked ASC entry on link error v4l2asyncmatchnotify creates ancillary media links before adding asc-ascsubdeventry to...

PT-2026-93893

Name of the Vulnerable Software and Affected Versions Open5GS versions prior to 2.8.1 Description A remote attack can cause a null pointer dereference in the PFCP Handler component. This occurs within the ogs pfcp parse volume measurement function located in the lib/pfcp/types.c library. A null...

PT-2026-93895

A Null Pointer Dereference in the mk sched event close function mk server/mk scheduler.c of Monkey through commit 4fb0c16 allows attackers to cause a Denial of Service DoS via sending a crafted HTTP request to the server...

PT-2026-93448

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the drm/amdkfd component where the functions create queue cpsch and create queue nocpsch call mqd mgr-restore mqd during a CRIU restore process without verifying if th...

PT-2026-93665

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A null-pointer dereference occurs in the f midi2 free ep reqs function when cleaning up an endpoint that was not initialized. This happens when the MIDI 2.0 gadget is configured via...

PT-2026-93596

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference occurs in the s390/vfio-ap component during queue probe. When the vfio ap mdev probe queue function creates the sysfs attribute group, the driver data for the...

CVE-2026-89851: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix FCE trace enable parsing in debugfs qla2x00dfsfcewrite called kstrtoul with a NULL result pointer, so a successful parse would dereference NULL and oops. Worse, the int return value 0 on success, negative errno...

CVE-2026-38999

The Monkey server (through commit 4fb0c16 ) is vulnerable to a Null Pointer Dereference in the mk_sched_event_close function located within mk_server/mk_scheduler.c. An attacker can exploit this vulnerability by sending a crafted HTTP request to the server, resulting in a Denial of Service (DoS) ...

PT-2026-93450

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference occurs when reading the /sys/kernel/debug/kfd/mqds endpoint while a process holds an active KFD queue. This happens because the for loop calling the debugfs sh...

PT-2026-93476

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the f2fs file system where the checkpoint merge feature can be enabled even if no checkpoint merge thread is active, such as during a read-only mount. In this state, t...

PT-2026-93661

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference exists in the gadget dev ioctl function. The issue occurs because the function reads dev-gadget before acquiring dev-lock, while the dev-state is checked only...

PT-2026-93542

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference exists in the airspy driver. The airspy disconnect function clears the s-udev variable while holding the v4l2 lock. However, if a user closes the device after ...

PT-2026-93443

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference exists in the drm/nouveau/uvmm component. In nouveau uvmm bind job submit, the OP MAP SPARSE case creates a region but leaves the op-ops variable as NULL. If a...

CVE-2026-89884: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: media: platform: mtk-mdp3: fix NULL deref on failed SCP lookup Add the missing sanity check after looking up the SCP to avoid dereferencing a NULL-pointer in case its driver has not yet been bound...

CVE-2026-89863: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: edif: Fix NULL pointer deref in RX SA delete check qlachkedifrxsadeletepending obtains the SCSI command via GETCMDSPsp and immediately dereferences cmd-scdatadirection. That command pointer can be NULL: the firmwar...

CVE-2026-89966: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: mm/hugetlbcma: fix null nodemask dereference in hugetlbcmaallocfrozenfolio allocbuddyhugetlbfoliowithmpol can pass a NULL nodemask to allocfreshhugetlbfolio as a fallback to allocate from all nodes. If order is gigantic,...

Linux Distros Unpatched Vulnerability : CVE-2026-89993

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - dmaengine: dw-edma: Initialize IRQ data before requesting IRQs dwedmairqrequest passes struct dwedmairq to requestirq before dwedmachannelsetup fills the back...

PT-2026-93504

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference exists in the qla chk edif rx sa delete pending function. The function retrieves a SCSI command using GET CMD SPsp and accesses cmd-sc data direction without...