87369 matches found
EUVD-2026-86214
In the Linux kernel, the following vulnerability has been resolved: spi: Add NULL check for spigetdeviceid in spigetdevicematchdata Prevent NULL pointer dereference when spigetdeviceid returns NULL, which can happen when using driveroverride without matching SPI ID entry...
CVE-2026-93825 spi: Add NULL check for spi_get_device_id() in spi_get_device_match_data()
In the Linux kernel, the following vulnerability has been resolved: spi: Add NULL check for spigetdeviceid in spigetdevicematchdata Prevent NULL pointer dereference when spigetdeviceid returns NULL, which can happen when using driveroverride without matching SPI ID entry...
CVE-2026-93825
The Linux kernel contains a vulnerability where a NULL pointer dereference can occur within the spi subsystem. Specifically, the function spi_get_device_match_data() fails to perform a NULL check on the return value of spi_get_device_id(). This issue can be triggered when using driver_override wi...
CVE-2026-93825 spi: Add NULL check for spi_get_device_id() in spi_get_device_match_data()
In the Linux kernel, the following vulnerability has been resolved: spi: Add NULL check for spigetdeviceid in spigetdevicematchdata Prevent NULL pointer dereference when spigetdeviceid returns NULL, which can happen when using driveroverride without matching SPI ID entry...
CVE-2026-93796 wifi: iwlwifi: pcie: null RX pointers after free
In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: pcie: null RX pointers after free When iwlpcietxinit fails after RX init, nic init unwinds via iwlpcierxfree. The freed RX members stayed non-NULL on the live transport object, so later teardown or retry could touc...
CVE-2026-93796 wifi: iwlwifi: pcie: null RX pointers after free
In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: pcie: null RX pointers after free When iwlpcietxinit fails after RX init, nic init unwinds via iwlpcierxfree. The freed RX members stayed non-NULL on the live transport object, so later teardown or retry could touc...
CVE-2026-93286 net: appletalk: fix NULL pointer dereference in aarp_send_ddp()
In the Linux kernel, the following vulnerability has been resolved: net: appletalk: fix NULL pointer dereference in aarpsendddp aarpsendddp calls atalkfinddevaddrdev in the LocalTalk fast path without checking for NULL. When the device has no AppleTalk interface configured dev-atalkptr == NULL,...
CVE-2026-93286 net: appletalk: fix NULL pointer dereference in aarp_send_ddp()
In the Linux kernel, the following vulnerability has been resolved: net: appletalk: fix NULL pointer dereference in aarpsendddp aarpsendddp calls atalkfinddevaddrdev in the LocalTalk fast path without checking for NULL. When the device has no AppleTalk interface configured dev-atalkptr == NULL,...
CVE-2026-93286
The Linux kernel contains a NULL pointer dereference vulnerability in the Appletalk network stack. The aarp_send_ddp() function calls atalk_find_dev_addr(dev) without verifying if the device has an AppleTalk interface configured (i.e., dev->atalk_ptr is NULL). This leads to a crash when access...
EUVD-2026-86165
In the Linux kernel, the following vulnerability has been resolved: net: appletalk: fix NULL pointer dereference in aarpsendddp aarpsendddp calls atalkfinddevaddrdev in the LocalTalk fast path without checking for NULL. When the device has no AppleTalk interface configured dev-atalkptr == NULL,...
Linux kernel security vulnerabilities
A security vulnerability exists in Linux kernel version 6.2. It stems from the BPF verifier’s incorrect inference that a register is not empty when comparing two pointers within checkcondjmpop, potentially leading to null pointer dereferencing...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability that stems from double pointer dereferencing in TPprintk. This can lead to null pointer dereferencing...
Linux Kernel Security Vulnerabilities
The Linux kernel version 5.15 contains a security vulnerability. This vulnerability arises from the fact that the function vdusevalidateconfig only checks the upper bound of vq Align, without verifying that the alignment value must be a power of two and not less than VRINGUSEDALIGNSIZE. As a...
Linux Kernel Security Vulnerabilities
The Linux kernel version 6.8 contains security vulnerabilities. These vulnerabilities stem from the improper handling of null values by the BPF verifier when processing the bpfrefcountacquire function for borrowing RCU kptr. This can lead to a null pointer dereferencing, as the verifier may treat...
Linux Kernel Security Vulnerabilities
The Linux kernel version 5.8 contains a security vulnerability. This vulnerability stems from the regnotnull function in the bpf verifier, which only determines non-NULL based on the register type. There is no limitation on unbounded offsets, resulting in a false positive when the pointer might b...
Linux Kernel Security Vulnerabilities
Security vulnerabilities exist in Linux kernels versions from 5.4.297 to 5.5, from 5.10.231 to 5.11, from 5.15.174 to 5.16, from 6.1.120 to 6.2, from 6.6.64 to 6.7, from 6.11.11 to 6.12, from 6.12.2 to 6.13, and version 6.13. The vulnerability stems from a race condition between hciconndelsysfs a...
CVE-2026-93274 pinctrl: bcm2835: Don't remove an unregistered GPIO chip
In the Linux kernel, the following vulnerability has been resolved: pinctrl: bcm2835: Don't remove an unregistered GPIO chip If the devmpinctrlregister function fails, bcm2835pinctrlprobe calls gpiochipremove before gpiochipadddata has registered the GPIO chip. This means that upon failure the...
CVE-2026-93274 pinctrl: bcm2835: Don't remove an unregistered GPIO chip
In the Linux kernel, the following vulnerability has been resolved: pinctrl: bcm2835: Don't remove an unregistered GPIO chip If the devmpinctrlregister function fails, bcm2835pinctrlprobe calls gpiochipremove before gpiochipadddata has registered the GPIO chip. This means that upon failure the...
EUVD-2026-86146
In the Linux kernel, the following vulnerability has been resolved: pinctrl: bcm2835: Don't remove an unregistered GPIO chip If the devmpinctrlregister function fails, bcm2835pinctrlprobe calls gpiochipremove before gpiochipadddata has registered the GPIO chip. This means that upon failure the...
CVE-2026-93274
A null pointer dereference vulnerability exists in the Linux kernel within the pinctrl: bcm2835 component. The issue occurs when the devm_pinctrl_register() function fails; the bcm2835_pinctrl_probe() function incorrectly calls gpiochip_remove() before gpiochip_add_data() has registered the GPIO ...