CVE-2026-90080

A flaw was found in the Linux kernel's octeontx2-pf driver. When switching to devlink eswitch mode, a null pointer dereference can occur in the afxdpzcqidx handling. This issue arises because the afxdpzcqidx pointer, which tracks receive queues, is not properly initialized in certain non-AFXDP...

CVE-2026-90066

A flaw was found in the Linux kernel's ftrace module. This vulnerability occurs because the ftracedirectmultiinit function does not properly check the return value of kthreadrun. If kthreadrun fails, an error pointer is assigned, which is later passed to kthreadstop during module unload. This...

CVE-2026-90060

A flaw was found in the Linux kernel's ALSA control module. A local user could create a write-only kcontrol element without a get callback. This could lead to a null pointer dereference in the LED layer, causing a system crash and resulting in a denial of service...

CVE-2026-90115

A flaw was found in the Linux kernel's AFXDP xsk socket multi-buffer receive path. This vulnerability allows for a NULL pointer dereference in the xskrcv function due to improper handling of buffer allocation failures. An attacker could exploit this flaw to cause a system crash, leading to a Deni...

CVE-2026-90102

A flaw was found in the Linux kernel's NFSv4/pnfs component. The data server cache is incorrectly keyed only on the multipath address set, without considering the NFS version. This oversight allows different NFS versions to share the same internal data structure when two device IDs on one address...

CVE-2026-90091

A flaw was found in the Linux kernel's Bluetooth L2CAP Logical Link Control and Adaptation Protocol component. A race condition, a situation where multiple operations occur at the same time and interfere with each other, exists between internal functions. This can lead to a null pointer...

CVE-2026-109774

Invalid pointer, undefined behavior in the DOM: Notifications component. This vulnerability was fixed in Firefox 158 and Thunderbird 158...

CVE-2026-109774

Invalid pointer, undefined behavior in the DOM: Notifications component. This vulnerability was fixed in Firefox 158 and Thunderbird 158...

CVE-2026-109774 Invalid pointer, undefined behavior in the DOM: Notifications component

Invalid pointer, undefined behavior in the DOM: Notifications component. This vulnerability was fixed in Firefox 158 and Thunderbird 158...

CVE-2026-109774

Firefox and Thunderbird are affected by a vulnerability involving an invalid pointer in the DOM Notifications component , leading to undefined behavior . This issue was addressed in Firefox 158 and Thunderbird 158 . No specific information regarding exploit vectors or practical consequences beyon...

CVE-2026-109774

Invalid pointer, undefined behavior in the DOM: Notifications component. This vulnerability was fixed in Firefox 158 and Thunderbird 158...

CVE-2026-77206

A null pointer dereference flaw was found in Libreswan's IKEv2 state-machine handling. A remote, unauthenticated attacker can trigger the flaw by sending a malicious IKEv2 IKEAUTH packet, causing the pluto daemon to crash and restart. Repeated exploitation may result in a denial of service. The...

CVE-2026-109241

A flaw was found in FreeRDP. A malicious server can cause a Denial of Service DoS by triggering a NULL pointer dereference in the client video redirection channel. By sending messages out of sequence, specifically clearing geometry data before transmitting video data, the server causes the client...

CVE-2026-77207

A null pointer dereference flaw was found in Libreswan's PKCS7 certificate payload handling. When processing a crafted IKEv2 IKEAUTH packet containing a PKCS7 bundle with a certificate revocation list but no certificates, Libreswan may dereference a null pointer, causing the pluto daemon to crash...

firefox: Privilege escalation due to invalid pointer in the Graphics component

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Privilege escalation due to invalid pointer in the Graphics component...

firefox: thunderbird: Sandbox escape due to invalid pointer in the Graphics component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Sandbox escape due to invalid pointer in the Graphics component...

CVE-2026-109107

A weakness has been identified in Wavlink WL-WN592AX6 250422. Affected by this issue is the function main of the file /cgi-bin/upload.cgi. This manipulation of the argument Cookie causes null pointer dereference. The attack is possible to be carried out remotely. The exploit has been made availab...

CLSA-2026-1791876624 httpd: Fix of CVE-2026-63686

CVE-2026-63686: modxml2enc: NULL pointer dereference on charset conversion failure...

CLSA-2026-1791876326 Fix of 274 CVEs

CVE-2026-53091 - xfrm: Don't clobber inner headers when already set CVE-2026-53091 - net: account for encap headers in qdisc pkt len CVE-2026-53091 CVE-2026-93803 - wifi: libipw: fix key index receive bound checks CVE-2026-93803 CVE-2026-93286 - net: appletalk: fix NULL pointer dereference in...

CVE-2026-109107 Wavlink WL-WN592AX6 upload.cgi main null pointer dereference

A weakness has been identified in Wavlink WL-WN592AX6 250422. Affected by this issue is the function main of the file /cgi-bin/upload.cgi. This manipulation of the argument Cookie causes null pointer dereference. The attack is possible to be carried out remotely. The exploit has been made availab...