PT-2026-106643

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.2.10-1.1 Description A NULL-pointer dereference exists in the ALSA PCM component. The snd pcm timer init function calls snd device register to add a new snd timer structure to the global timer list before...

PT-2026-106597

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.2.10-1.1 Description A null pointer dereference occurs in the Linux kernel when a module is unloaded while a perf connection is active. The function pmu detach event sets the event-pmu pointer to null, which...

PT-2026-106614

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the bridge vlan component where errors during switchdev deletion in the vlan del function can lead to an inconsistent state, memory leaks during flushing, or a NULL...

Linux Distros Unpatched Vulnerability : CVE-2026-98302

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: fddi: skfp: fix NULL deref when setting the MAC address while down skfpctlsetmacaddress calls ResetAdapter unconditionally, without checking netifrunning...

Linux Distros Unpatched Vulnerability : CVE-2026-98358

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - IB/iser: reject a remote invalidation of an unregistered direction A write command whose data is sent entirely as immediate data is not registered...

SUSE CVE-2026-66859

NULL Pointer Dereference, Use of Uninitialized Variable vulnerability in Apache Thrift cglib bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

NULL Pointer Dereference

Overview Affected versions of this package are vulnerable to NULL Pointer Dereference due to the ValidateEntitlements function in solver/llbsolver/vertex.go. An attacker can panic the daemon by submitting a build that requests CDI devices when the daemon is started with --cdi-disabled or equivale...

Security Bulletin: IBM Security QRadar Log Management AQL Plugin contains components with known vulnerabilities

Summary The product includes vulnerable components e.g., framework libraries that could be identified and exploited with automated tools. IBM Security QRadar Log Management AQL Plugin has addressed the applicable CVEs in an update. Vulnerability Details CVEID:CVE-2026-76905 DESCRIPTION: kin-opena...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: net/smc: fixed an issue where a NULL pointer was dereferenced in smcibissgneedsync BUG: NULL pointer dereferencing in the kernel, address: 00000000000002ec PGD 0 P4D 0 Oops: 0000 1 SMP PTI CPU: 28 UID: 0 PID: 343 Comm: kworker/28...

Astra Linux – Vulnerability in Linux 5.10, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: xfrm: added a NULL check in xfrmupdateaeparams Normally, x-replayesn and x-preplayesn should be allocated in xfrmallocreplaystateesn…, hence xfrmupdateaeparams… can update them. However, the current implementation of xfrmnewae…...

Astra Linux – Vulnerability in Linux 5.10, Linux, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: Tracing: Fixed a null pointer dereference in the tracingerrlogopen function. This issue occurs when the function does not call seqopen if the file is opened only with write permissions. As a result, file-privatedata remains...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: xprtrdma: Check frwrwpcreate during the connect process. frwrwpcreate creates a singleton Memory Region used to encode padding for Write chunks whose payload length is not XDR-aligned. In case of failure, a negative errno is...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: ASoC: qcom: q6apm: fixed a NULL pointer dereferencing in graphcallback. When q6apmfreefragments is called, it frees rxdata.buf/txdata.buf and sets them to NULL under graph-lock. A late DSP buffer-done response can cause issues...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: crypto: lib/mpi – Avoid null pointer dereference in mpicmpui During NVMeTCP authentication, a controller can trigger a kernel oops by specifying the 8192-bit Diffie Hellman group and passing a correctly sized, but zeroed Diffie...

Astra Linux – Vulnerability found in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: ACPI: Processor: Idle: Check the return value of acpiFetchAcpiDev. The return value of acpiFetchAcpiDev can be NULL, which could lead to a NULL pointer dereferencing in acpiDeviceHid. rjw: Subject and changelog edits, added an...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: media: streamzap: fix race between device disconnection and urb callback Syzkaller has reported a general protection fault in the function irraweventstorewithfilter. This crash occurs due to a NULL pointer dereference of the...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: s390/dasd: Guards the sysfs discipline callbacks against unallocated private data. Several sysfs show/store handlers call a discipline callback that dereferes device-private, either directly or through the DASDDEFINEATTR macro...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: mgmt: Fixed a NULL dereference of hdev-discovery.uuids. The uuidcount member of the structdiscoverystate structure is assigned and read without any locks. This can lead to a situation where uuidcount != 0, but uuids is...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: nfsd: Blocking non-SAVEFH operations after FOREIGN PUTFH to prevent NULL dereferencing. When CONFIGNFSDV42INTERSSC is enabled, nfsd4putfh may return success with fhdentry and fhexport being NULL if fhverify returns nfserrstale an...

Astra Linux – Vulnerability in libde265

It was discovered that libde265 v1.0.10 contains a NULL pointer dereference in the putunweightedpred16fallback function located in fallback-motion.cc. This vulnerability allows attackers to cause a Denial of Service DoS attack through a crafted input file...