Security Bulletin: IBM InfoSphere Information Server is affected by multiple vulnerabilities in OpenSSL

Summary Multiple vulnerabilities in OpenSSL that is used by IBM InfoSphere Information Server were addressed. Vulnerability Details CVEID:CVE-2026-22796 DESCRIPTION: Issue summary: A type confusion vulnerability exists in the signature verification of signed PKCS7 data where an ASN1TYPE union...

CVE-2026-53392

A flaw was found in the Linux kernel's NFSv4 Network File System version 4 flexfiles component. This vulnerability occurs when the fflayoutalloclseg function processes a malformed flexfiles layout that specifies a zero filehandle version count. An attacker could exploit this by providing a...

CVE-2026-53391

A flaw was found in the Linux kernel's NFSv4/pNFS implementation. The nfs4decodempdsaddr function, responsible for decoding network address information, does not properly handle zero-length raddr opaque data. A malicious or compromised metadata server can exploit this by providing a zero-length...

CVE-2026-64052

A flaw was found in the Linux kernel's bio-integrity module. The biointegritymapuser function does not correctly handle partially pinned user pages, which can occur when pinuserpagesfast returns fewer pages than requested. This oversight leads to a null-pointer dereference when attempting to acce...

CVE-2026-63762

SurrealDB before v2.6.1 and before v3.0.0-beta.3 contains a denial of service vulnerability in its embedded JavaScript scripting engine, which is enabled via the --allow-scripting capability disabled by default. Any user able to execute arbitrary queries — including unauthenticated guests when...

CVE-2026-64120

A flaw was found in the Linux kernel's ethtool network utility. Insufficient error handling in the phypreparedata function, specifically for memory allocation failures when handling network device names, can lead to a NULL pointer dereference. This vulnerability can cause a kernel panic in...

CVE-2026-64116

A flaw was found in the Linux kernel's IPv6 In-situ Operations, Administration, and Maintenance IOAM module. This vulnerability allows a remote attacker to cause a system crash, leading to a Denial of Service DoS. The flaw occurs because the ipv6hopioam function does not properly validate a point...

CVE-2026-64048

A flaw was found in the Linux kernel's Server-Message-Block Direct SMC-D client. A remote attacker can exploit this vulnerability by sending a specially crafted SMC-Dv2 proposal with a Channel Identifier CHID of 0. This malicious proposal can cause a null pointer dereference in the kernel's SMC...

media: vidtv: fix NULL pointer dereference in vidtv_mux_push_si

...

vc_screen: fix null-ptr-deref in vcs_notifier() during concurrent vcs_write

...

httpd: NULL pointer dereference via specially crafted request

A flaw was found in the moddavlock module of httpd. This vulnerability allows a remote unauthenticated attacker to crash the server due to a NULL pointer dereference via a specially crafted request...

Linux Distros Unpatched Vulnerability : CVE-2026-64116

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ipv6: ioam: add NULL check for idev in ipv6hopioam Reported by Sashiko: The function ipv6hopioam accesses in6devgetskb-dev-cnf.ioam6enabled without validating t...

Linux Distros Unpatched Vulnerability : CVE-2026-64207

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net/sched: dualpi2: fix GSO backlog accounting When DualPI2 splits a GSO skb into N segments, it propagates N additional packets to its parent before returning...

Oracle Linux 10 : kernel (ELSA-2026-25191)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-25191 advisory. - crypto: ccp - copy IV using skcipher ivsize CKI Backport Bot RHEL-188463 CVE-2026-53016 - futex/requeue: Revert 'Prevent NULL pointer dereference i...

Linux Distros Unpatched Vulnerability : CVE-2026-64141

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix null pointer dereference in compareguidkey sessionfdcheck walks the per-inode...

Linux Distros Unpatched Vulnerability : CVE-2026-64094

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - batman-adv: bla: avoid NULL-ptr deref for claim via dropped interface Without rtnllock held, a hardif might be retrieved as primary interface of a meshif, but...

Linux Distros Unpatched Vulnerability : CVE-2026-64049

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: drm/msm/adreno: fix userspace- triggered crash on a2xx-a4xx Before a5xx Adreno driver will n...

PT-2026-61643

In the Linux kernel, the following vulnerability has been resolved: net: team: fix NULL pointer dereference in team xmit during mode change team change mode clears team-ops with memset before restoring safe dummy handlers via team adjust ops. A concurrent team xmit running under RCU on another CP...

Linux Distros Unpatched Vulnerability : CVE-2026-64052

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - block: bio-integrity: Fix null-ptr-deref in biointegritymapuser pinuserpagesfast can partially succeed and return the number of pages that were actually pinned...

Linux Distros Unpatched Vulnerability : CVE-2026-63991

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Bluetooth: 6lowpan: check skbclone return value in sendmcastpkt The skbclone function can return NULL if memory allocation fails. sendmcastpkt calls skbclone...