CVE-2021-24086

CVE-2021-24086 This is a proof of concept for CVE-2021-24086 "Windows TCP/IP Denial of Service Vulnerability ", a NULL dereference in tcpip.sys patched by Microsoft in February 2021. According to this tweet, the vulnerability has been found by @piazzt. It is triggerable remotely by sending...

PT-2026-90114

In the Linux kernel, the following vulnerability has been resolved: net/smc: do not dereference an unset send buffer on the SMC-D teardown path smc close stream wait calls smc tx prepared sends from inside its sk wait event condition, and sk wait event evaluates that condition once with the socke...

SUSE SLED15: libopenssl-3-devel / libopenssl-3-fips-provider / etc (SUSE-SU-2026:3835-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3835-1 advisory. OpenSSL is updated to 3.5.0 in SLE-15-SP7: jscPED-16072 Enables Post-Quantum Cryptography PQC TLS support...

PT-2026-90308

In the Linux kernel, the following vulnerability has been resolved: accel/rocket: fix NULL dereference and integer overflow in rocket job push rocket job push allocates a temporary array to hold all input and output GEM object pointers: bos = kvmalloc arrayjob-in bo count + job-out bo count,...

PT-2026-90263

In the Linux kernel, the following vulnerability has been resolved: SUNRPC: Check svc pool percpu counter allocation svc create initializes three per-pool percpu counter stats and ignores every return value. On SMP, percpu counter init fails when alloc percpu gfp cannot satisfy the allocation,...

PT-2026-90395

In the Linux kernel, the following vulnerability has been resolved: nfsd: fix null dereference in nfsd4 setattr for deleg timestamp attrs When a SETATTR request includes FATTR4 WORD2 TIME DELEG ACCESS or FATTR4 WORD2 TIME DELEG MODIFY in the attribute bitmap, nfsd4 setattr sets deleg attrs=true a...

PT-2026-90193

In the Linux kernel, the following vulnerability has been resolved: sctp: fix NULL deref on untransmitted RECONF completion sctp process strreset outreq, sctp process strreset addstrm out and sctp process strreset resp complete a pending stream reconfiguration request by stopping the reconf timer...

PT-2026-90286

In the Linux kernel, the following vulnerability has been resolved: cxl/mce: Make the MCE notifier per-region Flavien Solt reported lifetime issues with the CXL MCE notifier, which can lead to NULL dereferences and use-after-free in the MCE handler. The notifier was registered per memory device a...

PT-2026-90425

In the Linux kernel, the following vulnerability has been resolved: lockd, nfsd: RCU-protect nlmsvc ops dispatch nlmsvc ops is published by nfsd lockd init and cleared by nfsd lockd shutdown with plain stores, while lockd dereferences it unguarded from dispatch sites in fs/lockd/svcsubs.c. The...

PT-2026-90222

In the Linux kernel, the following vulnerability has been resolved: RDMA/uverbs: Add UVERBS ATTR UHW to UVERBS METHOD REG MR The original commit missed that three drivers mthca, irdma, siw have UHW data associated with reg mr that cannot be passed through the ioctl. They also assume that the udat...

PT-2026-90200

In the Linux kernel, the following vulnerability has been resolved: lockd: fix NULL dereference on lockowner allocation failure nlmclnt locks init private installs NLM file lock operations even when nlmclnt find lockowner fails to allocate a lockowner. nlmclnt proc then returns -ENOMEM, but the V...

PT-2026-90086

In the Linux kernel, the following vulnerability has been resolved: dm-pcache: only hand out initialized cache segments get cache segment scans the segment map up to cache-n segs, the physical device segment count, but cache segs init only initializes the first cache info-n segs segments. A craft...

PT-2026-90378

In the Linux kernel, the following vulnerability has been resolved: NFSD: Prevent lock owner use-after-free during client teardown destroy client releases a client's open owners, but a lock owner whose only reference is a blocked lock nbl stays on cl ownerstr hashtbl. client has state does not...

PT-2026-90233

In the Linux kernel, the following vulnerability has been resolved: sched ext: Fix rq-core pick corruption under core scheduling Core scheduling's pick next task picks what to run on every SMT sibling of the core in a single pass under the shared core-wide rq lock. The selection state is consiste...

SMBGhost-SMBleed-scanner

SMBGhost CVE-2020-0796 and SMBleed CVE-2020-1206 Scanner c 2020 ZecOps, Inc. - https://www.zecops.com - Find Attackers' Mistakes Intended only for educational and testing in corporate environments. ZecOps takes no responsibility for the code, use at your own risk. Please contact...

SUSE-SU-2026:3835-1 Security update for openssl, openssl-3

This update for openssl, openssl-3 fixes the following issues: OpenSSL is updated to 3.5.0 in SLE-15-SP7: jscPED-16072 Enables Post-Quantum Cryptography PQC TLS support Security issues fixed: CVE-2026-42764: NULL pointer dereference in QUIC server initial packet handling bsc1266347 CVE-2026-34182...

CVE-2026-45747

Suricata versions prior to 7.0.16 are affected by a null pointer dereference in the Lua TLS certificate information helper (TlsGetCertInfo). When a Lua script requests certificate details for TLS traffic where some fields are absent, Suricata can be crashed, resulting in a denial of service . The...

CVE-2026-45747 Suricata lua/tls: null dereference in TlsGetCertInfo

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to version 7.0.16, the Lua TLS certificate information helper could dereference NULL certificate fields when a Lua script requested certificate information for TLS traffic...

CVE-2026-45747 Suricata lua/tls: null dereference in TlsGetCertInfo

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to version 7.0.16, the Lua TLS certificate information helper could dereference NULL certificate fields when a Lua script requested certificate information for TLS traffic...

CVE-2026-45747 Suricata lua/tls: null dereference in TlsGetCertInfo

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to version 7.0.16, the Lua TLS certificate information helper could dereference NULL certificate fields when a Lua script requested certificate information for TLS traffic...