87357 matches found
CVE-2026-97537 scsi: qla2xxx: Fix queue teardown NULL dma_free and bitmap locking
In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix queue teardown NULL dmafree and bitmap locking qla25xxfreereqque and qla25xxfreerspque have two pre-existing bugs exposed on the error path of qla25xxcreatereq,rspque: 1. When dmaalloccoherent fails during queu...
CVE-2026-97532 scsi: qla2xxx: Null out freed pointers in qla2x00_mem_alloc() error path
In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Null out freed pointers in qla2x00memalloc error path When qla2x00memalloc fails, qla2x00probeone jumps to probehwfailed and calls qla2x00memfree. Several error labels in qla2x00memalloc freed adapter members...
CVE-2026-97532
The Linux kernel contains a vulnerability in the scsi: qla2xxx driver within the qla2x00_mem_alloc() function's error path. When memory allocation fails, the function frees several adapter members (including elsrej.c , purex_dma_pool , and flt ) but leaves the pointers dangling. Consequently, the...
EUVD-2026-86840
In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Null out freed pointers in qla2x00memalloc error path When qla2x00memalloc fails, qla2x00probeone jumps to probehwfailed and calls qla2x00memfree. Several error labels in qla2x00memalloc freed adapter members...
CVE-2026-97532 scsi: qla2xxx: Null out freed pointers in qla2x00_mem_alloc() error path
In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Null out freed pointers in qla2x00memalloc error path When qla2x00memalloc fails, qla2x00probeone jumps to probehwfailed and calls qla2x00memfree. Several error labels in qla2x00memalloc freed adapter members...
CLSA-2026-1790328349 ImageMagick: Fix of 3 CVEs
CVE-2026-93586: fix a use-after-free when ImagesToBlob writes an image list to an in-memory blob - CVE-2026-93587: make the PCD and HALD readers honour the list-length resource limit when cloning scenes - CVE-2026-93588: fix a NULL pointer dereference when a PNM comment cannot be grown...
CLSA-2026-1790328174 ImageMagick: Fix of 3 CVEs
CVE-2026-93586: fix a use-after-free when ImagesToBlob writes an image list to an in-memory blob - CVE-2026-93587: make the PCD and HALD readers honour the list-length resource limit when cloning scenes - CVE-2026-93588: fix a NULL pointer dereference when a PNM comment cannot be grown...
CLSA-2026-1790327966 ImageMagick: Fix of 3 CVEs
CVE-2026-93586: fix a use-after-free when ImagesToBlob writes an image list to an in-memory blob - CVE-2026-93587: make the PCD and HALD readers honour the list-length resource limit when cloning scenes - CVE-2026-93588: fix a NULL pointer dereference when a PNM comment cannot be grown...
CLSA-2026-1790327628 ImageMagick: Fix of 3 CVEs
CVE-2026-93586: fix a use-after-free when ImagesToBlob writes an image list to an in-memory blob - CVE-2026-93587: make the PCD and HALD readers honour the list-length resource limit when cloning scenes - CVE-2026-93588: fix a NULL pointer dereference when a PNM comment cannot be grown...
kernel: drm/amdgpu: Fix context pstate override handling
A flaw was found in the Linux kernel's amdgpu graphics driver. Improper handling of context pstate overrides can lead to use-after-free and NULL pointer dereferences during context initialization and finalization. A local attacker could exploit this vulnerability to cause system instability or a...
OESA-2026-4091 poco security update
This is ROS melodic roscomm's 3rdparty poco. Security Fixes: A vulnerability was found in poco up to 1.14.1. It has been rated as problematic. Affected by this issue is the function MultipartInputStream of the file Net/src/MultipartReader.cpp. The manipulation leads to null pointer dereference. T...
OESA-2026-4090 poco security update
This is ROS melodic roscomm's 3rdparty poco. Security Fixes: A vulnerability was found in poco up to 1.14.1. It has been rated as problematic. Affected by this issue is the function MultipartInputStream of the file Net/src/MultipartReader.cpp. The manipulation leads to null pointer dereference. T...
OESA-2026-4089 poco security update
This is ROS melodic roscomm's 3rdparty poco. Security Fixes: A vulnerability was found in poco up to 1.14.1. It has been rated as problematic. Affected by this issue is the function MultipartInputStream of the file Net/src/MultipartReader.cpp. The manipulation leads to null pointer dereference. T...
OESA-2026-4017 ImageMagick security update
Use ImageMagick to create, edit, compose, or convert bitmap images. It can read and write images in a variety of formats over 200 including PNG, JPEG, GIF, HEIC, TIFF, DPX, EXR, WebP, Postscript, PDF, and SVG. Use ImageMagick to resize, flip, mirror, rotate, distort, shear and transform images,...
CVE-2026-97980
In the Linux kernel, the following vulnerability has been resolved: s390/debug: Fix NULL pointer dereference in debugsetlevel Commit a2cec6863709 "s390/debug: Add s390dbf kernel parameter" incorrectly removed a null-id check from debugsetlevel, introducing a possible NULL pointer dereference for...
CVE-2026-88389
Espruino 2v29 commit bffc6d0 contains a NULL pointer dereference vulnerability in jslGetRawString in src/jslex.c. Crafted raw/binary string input can cause the lexer to pass a NULL iterator target to jsvLockAgain. In RELEASE/NOASSERT builds, the missing assertion guard allows a write through the...
CVE-2026-98145
In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: reject a command chain that carries no commands A chain whose commandcount is zero passes the payload length check, because structsizepayload, data, 0 is just the header. The fill loop then does not run, so offset...
EUVD-2026-87108
Espruino 2v29 commit bffc6d0 contains a NULL pointer dereference vulnerability in jslGetRawString in src/jslex.c. Crafted raw/binary string input can cause the lexer to pass a NULL iterator target to jsvLockAgain. In RELEASE/NOASSERT builds, the missing assertion guard allows a write through the...
CVE-2026-88389
Espruino 2v29 commit bffc6d0 contains a NULL pointer dereference vulnerability in jslGetRawString in src/jslex.c. Crafted raw/binary string input can cause the lexer to pass a NULL iterator target to jsvLockAgain. In RELEASE/NOASSERT builds, the missing assertion guard allows a write through the...
PT-2026-98861
Name of the Vulnerable Software and Affected Versions Espruino version 2v29 Description A NULL pointer dereference occurs in the jslGetRawString function within src/jslex.c. When provided with specially crafted raw or binary string input, the lexer may pass a NULL iterator target to the...