110420 matches found
LSN-0122-1: Kernel Live Patch Security Notice
In the Linux kernel, the following vulnerability has been resolved: fs: dlm: fix use after free in midcomms commit While working on processing dlm message in softirq context I experienced the following KASAN use-after-free warning: . In the Linux kernel, the following vulnerability has been...
CVE-2026-78148
A flaw was found in the ggml-RPC Server component of llama.cpp. A remote attacker can exploit this vulnerability by performing a specific manipulation, leading to a null pointer dereference. This can result in a Denial of Service DoS, making the affected system unavailable. Mitigation For systems...
CVE-2026-98358
A flaw was found in the Linux kernel's iSCSI Extensions for Remote Direct Memory Access iSER driver. A remote storage target can trigger a Denial of Service DoS by sending an unexpected remote invalidation response for write operations transmitted as immediate data. In this scenario, the initiato...
CVE-2026-98356
A flaw was found in the Linux kernel's Broadcom NetXtreme bnxtre driver. During device initialization, the driver fails to verify that memory allocation for the Data Center Bridging DCB workqueue succeeded. Under low-memory conditions where this setup fails, a subsequent asynchronous DCB...
CVE-2026-98355
A flaw was found in the Linux kernel's RDMA Remote Direct Memory Access subsystem. When connection path initialization fails in the RDMA Transport RTRS driver, error cleanup routines invoke event tracing before the associated object name is set. This issue leads to a null pointer dereference,...
CLSA-2026-1791118211 libxml2: Fix of 2 CVEs
CVE-2025-7425: clear the attribute type through the live attr argument in xmlRemoveID instead of id-attr, which read the xmlID already freed by xmlHashRemoveEntry - CVE-2022-23308: normalize the ID value in xmlRemoveID after it is read from the attribute instead of before, where the pointer was...
SUSE CVE-2026-98220
In the Linux kernel, the following vulnerability has been resolved: schedext: Fix NULL sched deref in kfunc sub-sched error paths When the root scheduler has sub-scheds attached, the COMPAT kfunc wrappers scxbpfselectcpuand and scxbpfdsqinsertvtime refuse the call and report to @p's scheduler:...
SUSE CVE-2026-98314
In the Linux kernel, the following vulnerability has been resolved: ALSA: pcm: set timer-privatedata before registering the PCM timer sndpcmtimerinit calls snddeviceregister to link the new struct sndtimer into the global timer list while it still carries hw.cresolution = sndpcmtimerresolution an...
SUSE CVE-2026-98355
In the Linux kernel, the following vulnerability has been resolved: RDMA/rtrs: guard against null kobj name In the client, if initpath errors, the callee tries to clean up with rtrscltcloseconns. However, this can lead to calling the event tracing code with cltpath-kobj-name being NULL and thus...
SUSE SLES12 Security Update : openexr (SUSE-SU-2026:4532-1)
The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:4532-1 advisory. This update for openexr fixes the following issue: - CVE-2026-88384: NULL pointer dereference in the C++ attribute parsing path when a...
CVE-2026-107169: NULL Pointer Dereference
A flaw was found in m17n-lib. An attacker could provide specially crafted or truncated UTF-8 input to trigger an unhandled null pointer dereference during text processing. This issue causes the application to crash unexpectedly, resulting in a Denial of Service DoS...
Failover Cluster Code Execution
The vulnerability of the Failover Cluster component for Windows operating systems is related to the swapping of an unreliable pointer. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
ROS-20261007-73-0373
The vulnerability in the kernel-lt is related to the swapping of the zero pointer. Exploiting this vulnerability can allow an attacker to cause a service failure...
PT-2026-107496
Name of the Vulnerable Software and Affected Versions m17n-lib affected versions not specified Description A flaw in the library initialization process can leave an internal driver pointer uninitialized. Under specific error conditions, such as database corruption or system resource exhaustion, a...
CVE-2026-107170: NULL Pointer Dereference
A flaw was found in m17n-lib. A partial failure during library initialization can leave an internal driver pointer uninitialized. Under specific error conditions, such as system resource exhaustion or database corruption, an application attempting to open an input method dereferences this null...
CVE-2026-107213: NULL Pointer Dereference
Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.9.0 to 2.11.0, GetSlicers checks for ExtLst but dereferences ws.Drawing without checking whether the independently optional drawing element exists. File.GetSlicers reads ws.Drawing.RID after seeing a...
ROS-20261007-73-0198
The vulnerability of the alpsrawevent function in the drivers/hid/hid-alps.c module of the Linux kernel subsystem for user interface devices relates to the pointer manipulation. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility o...
ROS-20261007-73-0038
The vulnerability in the kernel-lt is related to the swapping of the zero pointer. Exploiting this vulnerability can allow an attacker to cause a service failure...
ROS-20261007-73-0075
The vulnerability of the intelenginesresetdefaultsubmission function in the drivers/gpu/drm/i915/gt/intelenginecs.c file of the Direct Rendering Infrastructure DRI driver for the Linux operating system is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to...