CVE-2026-74418

A flaw was found in the dma-fence subsystem of the Linux kernel. This vulnerability allows for a null pointer dereference in tracepoint functions, such as tracedmafencesignaled, tracedmafencewaitend, and tracedmafencedestroy, after a fence operation has been signaled and its internal pointers...

CVE-2026-74407

A flaw was found in the Linux kernel's ath11k Wi-Fi driver. A race condition exists between the system's reboot or shutdown process and the WLAN firmware crash recovery SSR mechanism. This race condition can lead to a NULL pointer dereference, causing the kernel to crash and resulting in a Denial...

CVE-2026-17165 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to a NULL pointer dereference...

CVE-2026-17165 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to a NULL pointer dereference...

CVE-2026-17009

IBM AIX 7.2/7.3 and PowerVM VIOS 4.1 contain a NULL pointer dereference exploitable by a local attacker with low privileges, causing denial of service (CVSS 4.7 MEDIUM). Exploitation requires high complexity; no exploit code or in-the-wild activity is documented. The IBM support reference is prov...

CVE-2026-17009 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to cause a denial of service due to a NULL pointer dereference...

CVE-2026-17009 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to cause a denial of service due to a NULL pointer dereference...

K000163013: LibTIFF vulnerabilities CVE-2018-17000, CVE-2018-19210, CVE-2019-7663, CVE-2020-19131, and CVE-2020-19144

Security Advisory Description CVE-2018-17000 A NULL pointer dereference in the function TIFFmemcmp at tifunix.c called from TIFFWriteDirectoryTagTransferfunction in LibTIFF 4.0.9 allows an attacker to cause a denial-of-service through a crafted tiff file. This vulnerability can be triggered by th...

CVE-2026-77641

tor before 0.4.9.9 was prone to a NULL write after free when sending a CONFLUXSWITCH cell fails. The return value of relaysendcommandfromedge was ignored, so a send failure which calls circuitmarkforclose and removes the leg via cfxdelleg would go undetected, causing the caller to write to the...

CVE-2026-74387

A flaw was found in the Linux kernel's Advanced Linux Sound Architecture ALSA sequencer MIDI component. A race condition exists during the teardown of MIDI output with event input processing. This can allow a local attacker to trigger a null pointer dereference or use-after-free condition...

CVE-2026-74366

A flaw was found in the Linux kernel's ath12k Wi-Fi driver. When a new Wi-Fi link fails to initialize correctly, the driver may attempt to access uninitialized data, leading to a null pointer dereference. This can cause the system to crash, resulting in a Denial of Service DoS...

CVE-2026-74342

A flaw was found in the Linux kernel's kernfs file system. This vulnerability allows a local attacker to cause a Denial of Service DoS by triggering a NULL pointer dereference. The issue occurs when the kernfs security initialization hook is invoked before critical parent node information is...

CVE-2026-74335

A flaw was found in the Linux kernel's Berkeley Packet Filter BPF subsystem. This vulnerability occurs in the bpftaskfromvpid function when a cgroupskb program, running in a soft interrupt, attempts to look up a task that is in the process of exiting. If the task's process ID PID namespace is...

CVE-2026-63380 Libevent: Null Pointer Dereference in `evws_new_session`

Libevent is an event notification library. Prior to 2.2.2-alpha, libevent can dereference invalid list pointers in ws.c when evwsnewsession enters its error path after evhttpstartws succeeds but buffereventenablelocking fails. evwsconnectionfree sees a non-null httpserver and unconditionally call...

CVE-2026-63380 Libevent: Null Pointer Dereference in `evws_new_session`

Libevent is an event notification library. Prior to 2.2.2-alpha, libevent can dereference invalid list pointers in ws.c when evwsnewsession enters its error path after evhttpstartws succeeds but buffereventenablelocking fails. evwsconnectionfree sees a non-null httpserver and unconditionally call...

EUVD-2026-63506

Libevent is an event notification library. Prior to 2.2.2-alpha, libevent can dereference invalid list pointers in ws.c when evwsnewsession enters its error path after evhttpstartws succeeds but buffereventenablelocking fails. evwsconnectionfree sees a non-null httpserver and unconditionally call...

CVE-2026-63380 Libevent: Null Pointer Dereference in `evws_new_session`

Libevent is an event notification library. Prior to 2.2.2-alpha, libevent can dereference invalid list pointers in ws.c when evwsnewsession enters its error path after evhttpstartws succeeds but buffereventenablelocking fails. evwsconnectionfree sees a non-null httpserver and unconditionally call...

CVE-2026-63380

Libevent is an event notification library. Prior to 2.2.2-alpha, libevent can dereference invalid list pointers in ws.c when evwsnewsession enters its error path after evhttpstartws succeeds but buffereventenablelocking fails. evwsconnectionfree sees a non-null httpserver and unconditionally call...

CVE-2026-74327

A flaw was found in the Linux kernel. A local attacker could trigger a null pointer dereference in the isvmareahugepages function. This occurs when findvmarea returns a NULL value, which is not properly handled before being dereferenced. Successful exploitation of this vulnerability could lead to...

libxml2: libxml2: NULL pointer dereference parsing nextCatalog without catalog attribute

A flaw was found in libxml2. A local user or an attacker providing a specially crafted XML catalog can trigger a NULL pointer dereference during XML catalog parsing. This occurs when a nextCatalog element lacks its mandatory catalog attribute, leading to the application crashing and causing a...