CVE-2026-105723

The Windows Distributed File System (DFS) is susceptible to an untrusted pointer dereference vulnerability. This flaw allows an unauthorized attacker to achieve elevation of privilege over a network. The vulnerability has a HIGH base severity score of 7.5 (CVSS 3.1). While the specific root cause...

CVE-2026-104343

Adobe Framemaker is affected by a NULL Pointer Dereference vulnerability (CWE-476) that can result in an application denial-of-service . An attacker can exploit this issue to crash the application, but it requires user interaction where a victim must open a malicious file . No specific exploit de...

ALPINE-CVE-2026-102700

With its original introduction, GNTTABcacheflush was made available uniformly. XSA-232 CVE-2017-14318 then covered an omitted NULL pointer check, yet the addition of that check failed to adjust the subsequent error path. That error path fails to drop a page reference in case the specified page is...

DEBIAN-CVE-2026-102700

With its original introduction, GNTTABcacheflush was made available uniformly. XSA-232 CVE-2017-14318 then covered an omitted NULL pointer check, yet the addition of that check failed to adjust the subsequent error path. That error path fails to drop a page reference in case the specified page is...

CVE-2026-102700

With its original introduction, GNTTABcacheflush was made available uniformly. XSA-232 CVE-2017-14318 then covered an omitted NULL pointer check, yet the addition of that check failed to adjust the subsequent error path. That error path fails to drop a page reference in case the specified page is...

CVE-2026-102700

With its original introduction, GNTTABcacheflush was made available uniformly. XSA-232 CVE-2017-14318 then covered an omitted NULL pointer check, yet the addition of that check failed to adjust the subsequent error path. That error path fails to drop a page reference in case the specified page is...

CVE-2026-77095

CvFWD contained a null pointer dereference affecting service availability. Software customers upgrade to resolved maintenance release. Update all Commvault installations, including CommServe, Webserver, Command Center, MediaAgents, Clients and HyperScale...

CVE-2026-90250

A flaw was found in the Linux kernel's BPF Berkeley Packet Filter cgroup storage mechanism. When replacing an existing BPF program with a new one that uses BPFMAPTYPEPERCPUCGROUPSTORAGE, the system may fail to properly allocate and assign the necessary cgroup storage. This oversight can lead to a...

CVE-2026-90228

A flaw was found in the Linux kernel's nvmet subsystem. A remote attacker can trigger a NULL pointer dereference by issuing a specific Identify command CNS 05h, CSI 02h ZNS targeting a file-backed namespace. This vulnerability occurs because the system attempts to access a block device that does...

CVE-2026-90280

A flaw was found in the Linux kernel's qcom qmp-usb physical layer PHY driver. A local attacker could trigger a null pointer dereference by re-enabling runtime power management via a sysfs attribute before the PHY is fully initialized. This can lead to a system crash, resulting in a Denial of...

CVE-2026-90186

A flaw was found in the Linux kernel's nullblk module. A local user can cause a system crash by attempting to resize device queues while a shared tag set is active. This improper handling of queue resizing leads to a null pointer dereference, which can result in a denial of service...

CVE-2026-90220

A flaw was found in the ALSA Advanced Linux Sound Architecture sequencer component of the Linux kernel. An unprivileged local attacker can exploit this vulnerability by sending a specially crafted variable-length event to a non-existent port and then reading the bounced error event. This can lead...

CVE-2026-90165

A flaw was found in the Linux kernel's ksmbd server. This vulnerability occurs when the ksmbdstopdurablescavenger function attempts to stop a kernel thread that was not properly initialized, leading to an invalid pointer dereference. An attacker could potentially exploit this to cause a system...

CVE-2026-90192

A flaw was found in the Linux kernel's qcom-cpucp mailbox driver. The qcomcpucpmboxsenddata function, responsible for sending data, did not properly handle a NULL data pointer when mailboxclearchannel attempted to notify the remote side that the receive RX channel was cleared. This blind...

CVE-2026-90172

A flaw was found in the Linux kernel's smbdirect module, which handles high-performance data transfer using Remote Direct Memory Access RDMA. During an RDMA connection attempt, if the connection acceptance fails, the system incorrectly deallocates memory resources before all related operations ar...

CVE-2026-90166

A flaw was found in the ksmbd Server Message Block server component of the Linux kernel. A remote attacker could exploit a null-pointer dereference vulnerability within the ksmbdipctreeconnectrequest function. This issue arises when the system attempts to access a memory location that has not bee...

CVE-2026-90164

A flaw was found in the Linux kernel's ksmbd server component. During the server's initialization process, an error in setting up internal process entries or counters is not handled correctly. This oversight can result in the system attempting to access a null pointer, which may lead to a system...

CVE-2026-90149

A flaw was found in the Linux kernel's NFSv4 Network File System version 4 flexfiles implementation. When an NFSv4.0 data server is used, two code paths incorrectly assume the client has a session, leading to a NULL pointer dereference. This issue can cause the kernel to crash, resulting in a...

CVE-2026-90148

A flaw was found in the Linux kernel's NFSv4 component. When the nfs4addlease function races with a delegation return, it can pass an incorrect, potentially null, argument to nfs4deletelease. This incorrect argument eventually leads to a null pointer dereference, which could allow a local attacke...

CVE-2026-77095 CvFWD Null Pointer Dereference

CvFWD contained a null pointer dereference affecting service availability. Software customers upgrade to resolved maintenance release. Update all Commvault installations, including CommServe, Webserver, Command Center, MediaAgents, Clients and HyperScale...