CVE-2026-68429

In the Linux kernel, the following vulnerability has been resolved: drm/dpmst: Handle torn-down topology gracefully in drmdpmsttopologyqueueprobe A hotplug or link-loss event can tear down the MST topology setting mgr-mststate = false and mgr-mstprimary = NULL concurrently with a caller invoking...

CVE-2026-29036

Affected software: cJSON library (versions 1.5.0–1.7.19). Component: decode_pointer_inplace() in cJSON_Utils.c. Issue: Incorrectly-resolved name/reference vulnerability that lets unauthenticated attackers manipulate JSON Patch paths by supplying crafted JSON Pointer escape sequences (~0, ~1). Imp...

CVE-2026-68141

A flaw was found in the afiucv component of the Linux kernel. This vulnerability occurs when the afiucvhscallbacksyn function fails to allocate a child socket, leading to a NULL pointer being passed to iucvsockkill. An attacker could potentially trigger this condition, causing a NULL pointer...

CVE-2026-68242

A flaw was found in the Linux kernel's graphics subsystem specifically drm/i915/gt. This vulnerability arises from an improper handling of memory allocation failures during graphics engine scheduling, which can lead to a null pointer dereference. A local attacker could exploit this issue to trigg...

CVE-2026-68191

A flaw was found in the Linux kernel's ath12k Wi-Fi driver. When the ath12k driver is unbound, a NULL pointer dereference can occur in the rhash table destroy functions. This issue arises because the hash tables may not be fully initialized before their destroy functions are called unconditionall...

CVE-2026-68224

A flaw was found in the Linux kernel's mali-c55 driver. This vulnerability occurs because the mediapadremotepadunique function's error return value an ERRPTR was not properly checked before being dereferenced in the enablestreams function. A local attacker could exploit this oversight, potentiall...

CVE-2026-68260

A flaw was found in the Linux kernel's drm/imagination driver. This vulnerability occurs because the graphics processing unit virtual memory GPU VM code does not properly synchronize find and map/unmap operations. A local attacker could exploit this timing issue by performing concurrent memory...

CVE-2026-68193

A flaw was found in the Linux kernel. The mt7925 Wi-Fi driver incorrectly dispatches a memory-mapped I/O MMIO specific event to non-MMIO buses, such as USB. This improper handling leads to a NULL pointer dereference when attempting to clean up DMA transmit queues. A remote attacker could exploit...

CVE-2026-68157

A flaw was found in libceph, a component of the Linux kernel. When processing a malformed CRUSH map, if a parent bucket's name exists but its type is missing, a null pointer dereference can occur. This issue can lead to a system crash, resulting in a Denial of Service DoS...

CVE-2026-68345

A flaw was found in the Linux kernel's armmpam component. When destroying component configuration, the destroycomponentcfg function attempts to add mbwustate objects to a garbage list. However, some Root Interrupt Systems RISes may have a NULL mbwustate object, leading to a null pointer dereferen...

CVE-2026-68305

A flaw was found in the Linux kernel's Direct Rendering Manager DRM subsystem. This vulnerability arises when graphics buffer objects are deallocated prematurely while the DRM structure remains active. This can lead to a null pointer dereference when the system attempts to access these freed...

CVE-2026-68362

A flaw was found in the ath11k Wi-Fi driver for the Linux kernel. During the firmware ready process, the driver incorrectly sets a flag indicating successful initialization even when the process fails. This inconsistent state can lead to a NULL pointer dereference when the driver attempts a...

CVE-2026-68308

A flaw was found in the Linux kernel's Wi-Fi driver mt76: mt7996. The mt76connacgethephycap routine can theoretically return a null pointer, which is not properly checked before being dereferenced. This oversight could allow a local attacker to cause a denial of service DoS by triggering a system...

CVE-2026-68346

A flaw was found in the ALSA cs35l41 driver within the Linux kernel. The cs35l41getacpimutestate function fails to properly free an ACPI object after use, leading to a memory leak with each successful query. Additionally, the driver does not validate the returned ACPI object, allowing a malformed...

CVE-2026-68310

A flaw was found in the Linux kernel's mt76 wifi driver. This vulnerability arises from improper handling of High Efficiency HE capability lookups, where a null pointer could be dereferenced. This could lead to a system crash, resulting in a Denial of Service DoS...

CVE-2026-68418

A flaw was found in the RDMA/irdma component of the Linux kernel. A local user could exploit this vulnerability by providing a zero value for userwqebufs during the creation of a Queue Pair QP. This action leads to a null pointer dereference, which can cause the system to crash, resulting in a...

CVE-2026-68328

A flaw was found in the Linux kernel's nfp driver. When allocating a resource mutex, the nfpcppmutexalloc function can return a NULL pointer on failure. However, the nfpcppresourcefind function might still report success, leading to a subsequent attempt to dereference the NULL pointer by...

CVE-2026-68309

A flaw was found in the Linux kernel's mt76 Wi-Fi driver. This vulnerability occurs because the mt76connacgethephycap routine can return a NULL value, which is then dereferenced without proper validation. This can lead to a NULL-pointer dereference, potentially causing a system crash and resultin...

CVE-2026-68282

A flaw was found in the Linux kernel, specifically within the drm/rockchip: analogixdp driver. This vulnerability occurs due to a missing error check for the return value of the platformgetresource function. If a memory resource is unavailable, this oversight can lead to a NULL pointer dereferenc...

CVE-2026-68337

A flaw was found in the Linux kernel. The BPF Berkeley Packet Filter redirect helpers, specifically bpfredirect and skbdoredirect, can attempt to dereference a null pointer if a bpfnetcontext is not established. This can occur when certain BPF programs are attached to a network queueing disciplin...