CVE-2026-19737

The ESP32 I2S driver in Zephyr RTOS contains a NULL pointer dereference vulnerability in the i2s_esp32_trigger_check() function within drivers/i2s/i2s_esp32.c. The root cause is that the driver fails to validate stream pointers for I2S_DIR_RX and I2S_DIR_TX directions, leading to a load from addr...

EUVD-2026-97105

i2sesp32triggercheck in drivers/i2s/i2sesp32.c validates the requested direction only for I2SDIRBOTH. The I2SDIRRX and I2SDIRTX branches read devcfg-rx.data-configured / devcfg-tx.data-configured without first checking the stream pointers. The device instantiation macro I2SESP32STREAMINIT sets bo...

CVE-2026-19737 NULL pointer dereference in the ESP32 I2S driver when triggering an unsupported direction

i2sesp32triggercheck in drivers/i2s/i2sesp32.c validates the requested direction only for I2SDIRBOTH. The I2SDIRRX and I2SDIRTX branches read devcfg-rx.data-configured / devcfg-tx.data-configured without first checking the stream pointers. The device instantiation macro I2SESP32STREAMINIT sets bo...

CVE-2026-19737

i2sesp32triggercheck in drivers/i2s/i2sesp32.c validates the requested direction only for I2SDIRBOTH. The I2SDIRRX and I2SDIRTX branches read devcfg-rx.data-configured / devcfg-tx.data-configured without first checking the stream pointers. The device instantiation macro I2SESP32STREAMINIT sets bo...

CVE-2026-19737 NULL pointer dereference in the ESP32 I2S driver when triggering an unsupported direction

i2sesp32triggercheck in drivers/i2s/i2sesp32.c validates the requested direction only for I2SDIRBOTH. The I2SDIRRX and I2SDIRTX branches read devcfg-rx.data-configured / devcfg-tx.data-configured without first checking the stream pointers. The device instantiation macro I2SESP32STREAMINIT sets bo...

Tai-e

Tai-e ✨Noticias Lanzamiento v0.5.4: Tai-e incluye un nuevo frontend que proporciona una conversión más rápida y confiable de programas Java a IR de Tai-e. Se admite el análisis de aplicaciones Android a través de un complemento basado en PacDroid integrado con análisis de punteros. Se admite el...

CVE-2026-92871

A flaw was found in pgpool-II. A remote, unauthenticated attacker could cause a Denial of Service DoS due to a NULL pointer dereference in the watchdog component. Exploiting this vulnerability leads to abnormal termination of the watchdog process. Mitigation Restrict network access to the pgpool-...

CVE-2026-98308

A flaw was found in the Linux kernel's ALSA Advanced Linux Sound Architecture High Definition Audio HDA subsystem. A local user can cause a denial of service DoS by attempting to open audio streams when hardware streams are exhausted. Because the controller driver invokes an event trace before...

CVE-2026-98302

A flaw was found in the Linux kernel's SysKonnect FDDI skfp network driver. A local user with administrative privileges can trigger a null pointer dereference by configuring the Media Access Control MAC address on a network interface that is down. This issue occurs because the driver attempts to...

CVE-2026-98294

A flaw was found in the Linux kernel's Qualcomm Bluetooth driver. Under specific error-recovery conditions, unbinding the driver after a device failure causes the system to write data to an already closed serial port. A local user could trigger this condition, resulting in a null-pointer...

PT-2026-110224

i2s esp32 trigger check in drivers/i2s/i2s esp32.c validates the requested direction only for I2S DIR BOTH. The I2S DIR RX and I2S DIR TX branches read dev cfg-rx.data-configured / dev cfg-tx.data-configured without first checking the stream pointers. The device instantiation macro I2S ESP32 STRE...

CVE-2026-19737: NULL Pointer Dereference

i2sesp32triggercheck in drivers/i2s/i2sesp32.c validates the requested direction only for I2SDIRBOTH. The I2SDIRRX and I2SDIRTX branches read devcfg-rx.data-configured / devcfg-tx.data-configured without first checking the stream pointers. The device instantiation macro I2SESP32STREAMINIT sets bo...

Lenovo Power Management Driver Null Pointer Dereference

Lenovo Power Management Driver versions earlier than 1.69.70.0 contain a null pointer dereference that allows a local authenticated user to cause a Windows blue screen. This proof of concept sends the affected IOCTL. https://packetstorm.news/download/235118...

CVE-2026-98285

A flaw was found in the Linux kernel's network bridge component. When removing Virtual Local Area Network VLAN configurations, errors returned by hardware offload devices prevent the kernel from completing software cleanup. A local user could exploit this vulnerability to trigger memory leaks or ...

CVE-2026-98270

A flaw was found in the Linux kernel's AMD GPU driver. The driver fails to verify that internal reliability and error-handling structures are initialized before accessing them during interrupt handling. If an interrupt occurs during this early startup window, the driver encounters a null pointer...

CVE-2026-98268

A flaw was found in the Linux kernel's performance monitoring perf subsystem. This vulnerability allows a local user to cause a Denial of Service DoS by crashing the operating system. When a kernel module is unloaded while a performance event remains active, the kernel clears the associated...

Exploit for CVE-2025-9548

CVE-2025-9548: Lenovo Power Management Driver null pointer der...

CVE-2026-98379

A flaw was found in the Linux kernel's netfilter subsystem. An unprivileged local user can cause a Denial of Service DoS by triggering a system crash through a null pointer dereference an attempt to access invalid memory. This issue occurs during IPv6 reverse-path filtering when the kernel...

CVE-2026-98346

A flaw was found in the Linux kernel's wireless configuration subsystem cfg80211. When calculating beacon interval data, the system attempts to retrieve radio mask information for wireless devices that lack an associated network interface without proper validation. A local attacker can exploit th...

Linux Distros Unpatched Vulnerability : CVE-2026-98383

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bpf: Disallow bpfskbpulldata for LWTSEG6LOCAL An LWTSEG6LOCAL program can invalidate its cached SRH with bpflwtseg6adjustsrh and then call bpfskbpulldata. The...