The vulnerability of the vfio_group_ioctl_set_container() function in the drivers/vfio/group.c module of the VFIO device driver for the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the vfiogroupioctlsetcontainer function in the drivers/vfio/group.c module of the VFIO device driver for the Linux operating system is related to the use of pointers. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the `bnxt_init_one()` function in the `drivers/net/ethernet/broadcom/bnxt/bnxt.c` file of the Broadcom Ethernet network adapter driver for the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the bnxtinitone function in the drivers/net/ethernet/broadcom/bnxt/bnxt.c file of the Broadcom Ethernet network adapter driver for the Linux operating system is related to the use of pointers. Exploiting this vulnerability could allow a remote attacker to cause a service...

The vulnerability of the setup_port() and destroy_port() functions in the drivers/infiniband/core/sysfs.c driver of the Linux operating system’s kernel allows a malicious actor to cause a service failure.

The vulnerability of the setupport and destroyport functions in the drivers/infiniband/core/sysfs.c driver of the Linux operating system’s InfiniBand kernel is related to the use of pointers. Exploiting this vulnerability could allow an attacker to cause a service failure...

CVE-2026-64240

A flaw was found in the Linux kernel's igorplugusb driver. This vulnerability occurs because the driver incorrectly passes a pointer instead of the actual USB control request setup packet to the USB core. As a result, the USB core misinterprets the data, leading to an invalid request type and...

ROS-20260702-73-0011

The vulnerability of the gserialsuspend function in the drivers/usb/gadget/function/userial.c file of the Linux device driver framework relates to the assignment of pointers. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of t...

ROS-20260701-73-0055

The vulnerability of the smcclcsendconfirmaccept function in the net/smc/smcclc.c module of the CLC-handshaking TCP socket subsystem of the Linux operating system’s SMC kernel is related to the assignment of pointers due to an incorrect update of a reused resource. Exploiting this vulnerability c...

ROS-20260701-73-0053

The vulnerability of the mwifiexhandleuaprxforward function in the drivers/net/wireless/marvell/mwifiex/uaptxrx.c file of the Marvell wireless adapter driver in the Linux operating system kernel is related to the use of pointers. Exploiting this vulnerability could allow an attacker to cause a...

Oj: Use-After-Free in Oj::Parser SAJ Long Key Callback

Summary Oj::Parser in SAJ mode does not protect cached object keys ≥ 35 bytes from garbage collection. A Ruby callback that triggers GC inside hashend can cause the key string to be reclaimed while the C parser still holds a pointer to it. The subsequent access to the freed string VALUE results i...

The vulnerability of Microsoft Word, Microsoft Office suites, and Microsoft 365 Apps for Enterprise, related to the misuse of a trusted pointer, allows attackers to execute arbitrary code.

The vulnerability of Microsoft Word, the Microsoft Office suite, and Microsoft 365 Apps for Enterprise is related to the use of an untrusted pointer. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-013484)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-013484 advisory. In the Linux kernel, the following vulnerability has been resolved: crypto: hisilicon/sec - fix the aead software fallback for engine Due to the subreq pointer misus...

ALPINE-CVE-2026-34757

LIBPNG is a reference library for use in applications that read, create, and manipulate PNG Portable Network Graphics raster image files. From 1.0.9 to before 1.6.57, passing a pointer obtained from pnggetPLTE, pnggettRNS, or pnggethIST back into the corresponding setter on the same...

The vulnerability of the qla24xx_bsg_request() function in the drivers/scsi/qla2xxx/qla_bsg.c module of the Linux operating system’s SCSI device driver allows a hacker to induce a service failure.

The vulnerability of the qla24xxbsgrequest function in the drivers/scsi/qla2xxx/qlabsg.c module of the Linux SCSI device driver framework is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the dw2102_i2c_transfer() function in the drivers/media/usb/dvb-usb/dw2102.c file of the multimedia device driver for the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the dw2102i2ctransfer function in the drivers/media/usb/dvb-usb/dw2102.c file of the multimedia device driver for the Linux operating system is related to the use of pointers. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the gpio_ir_recvRemove() function in the drivers/media/rc/gpio-ir-recv.c driver for multimedia devices in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the gpioirrecvremove function in the drivers/media/rc/gpio-ir-recv.c driver for multimedia devices in the Linux operating system is related to the use of pointers. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the mac80211_hwsim_select_tx_link() function in the drivers/net/wireless/virtual/mac80211_hwsim.c module of the Linux kernel wireless adapter driver allows a hacker to cause a service failure.

The vulnerability of the mac80211hwsimselecttxlink function in the drivers/net/wireless/virtual/mac80211hwsim.c module of the Linux wireless adapter driver framework is related to the use of pointers. Exploiting this vulnerability could allow an attacker to cause a system failure...

The vulnerability of the vpa_pmu_del() function in the arch/powerpc/perf/vpa-pmu.c module, which is part of the PowerPC platform support for the Linux operating system, allows a hacker to cause a service failure.

The vulnerability of the vpapmudel function in the arch/powerpc/perf/vpa-pmu.c module, which is part of the PowerPC platform support for the Linux operating system, relates to the use of pointers. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability in the otx2remove() function of the drivers/net/ethernet/marvell/octeontx2/nic/otx2_pf.c file of the Ethernet network adapter driver for the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the otx2remove function in the drivers/net/ethernet/marvell/octeontx2/nic/otx2pf.c file of the Ethernet network adapter driver for the Marvell-based Linux operating system is related to the use of pointers. Exploiting this vulnerability could allow an attacker to compromise t...

The vulnerability of the mpt3sas_transport_port_add() function in the drivers/scsi/mpt3sas/mpt3sas_transport.c driver of Linux’ SCSI device drivers allows a hacker to cause a service failure.

The vulnerability of the mpt3sastransportportadd function in the drivers/scsi/mpt3sas/mpt3sastransport.c driver for Linux SCSI devices is related to the use of pointers. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the iwl_mei_handle_sap_data() function in the drivers/net/wireless/intel/iwlwifi/mei/main.c file of the Intel wireless adapter support driver for the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the iwlmeihandlesapdata function in the drivers/net/wireless/intel/iwlwifi/mei/main.c file of the Intel wireless adapter support driver for the Linux operating system is related to the use of pointers. Exploiting this vulnerability could allow an attacker to cause a service...

The vulnerability of the cpt_register_algs() function in the drivers/crypto/marvell/octeontx2/otx2_cptvf_algs.c file of the Linux kernel cryptographic accelerator driver allows a hacker to cause a service failure.

The vulnerability of the cptregisteralgs function in the drivers/crypto/marvell/octeontx2/otx2cptvfalgs.c driver of the Linux kernel cryptographic accelerator is related to the use of pointers. Exploiting this vulnerability could allow an attacker to cause a system failure...