112268 matches found
AZL-107966 CVE-2026-107655 affecting package cups 2.4.19-1
A flaw was found in CUPS. When processing embedded job ticket comments within documents, the service improperly handles specific IPP attributes, causing an unhandled null pointer dereference. An unauthenticated attacker permitted to submit jobs to a shared printer queue can send a crafted Interne...
CVE-2026-107655
A flaw was found in CUPS. When processing embedded job ticket comments within documents, the service improperly handles specific IPP attributes, causing an unhandled null pointer dereference. An unauthenticated attacker permitted to submit jobs to a shared printer queue can send a crafted Interne...
UBUNTU-CVE-2026-107655
A flaw was found in CUPS. When processing embedded job ticket comments within documents, the service improperly handles specific IPP attributes, causing an unhandled null pointer dereference. An unauthenticated attacker permitted to submit jobs to a shared printer queue can send a crafted Interne...
CVE-2026-107655
A vulnerability exists in CUPS where improper handling of specific IPP attributes while processing embedded job ticket comments leads to an unhandled null pointer dereference . An unauthenticated attacker capable of submitting jobs to a shared printer queue can exploit this by sending a crafted I...
CVE-2026-107655 Cups: null pointer dereference via embedded job ticket comments allows remote denial of service
A flaw was found in CUPS. When processing embedded job ticket comments within documents, the service improperly handles specific IPP attributes, causing an unhandled null pointer dereference. An unauthenticated attacker permitted to submit jobs to a shared printer queue can send a crafted Interne...
CVE-2026-107655
A flaw was found in CUPS. When processing embedded job ticket comments within documents, the service improperly handles specific IPP attributes, causing an unhandled null pointer dereference. An unauthenticated attacker permitted to submit jobs to a shared printer queue can send a crafted Interne...
CVE-2026-107655 Cups: null pointer dereference via embedded job ticket comments allows remote denial of service
A flaw was found in CUPS. When processing embedded job ticket comments within documents, the service improperly handles specific IPP attributes, causing an unhandled null pointer dereference. An unauthenticated attacker permitted to submit jobs to a shared printer queue can send a crafted Interne...
EUVD-2026-95572
A flaw was found in CUPS. When processing embedded job ticket comments within documents, the service improperly handles specific IPP attributes, causing an unhandled null pointer dereference. An unauthenticated attacker permitted to submit jobs to a shared printer queue can send a crafted Interne...
CVE-2026-107655 Cups: null pointer dereference via embedded job ticket comments allows remote denial of service
A flaw was found in CUPS. When processing embedded job ticket comments within documents, the service improperly handles specific IPP attributes, causing an unhandled null pointer dereference. An unauthenticated attacker permitted to submit jobs to a shared printer queue can send a crafted Interne...
CVE-2026-98220
A flaw was found in the Linux kernel's extensible scheduler schedext subsystem. This vulnerability allows a local privileged user to cause a Denial of Service DoS by triggering a kernel crash. When specific scheduler compatibility functions are invoked on tasks lacking an active scheduler, such a...
CVE-2026-107655
A flaw was found in CUPS. When processing embedded job ticket comments within documents, the service improperly handles specific IPP attributes, causing an unhandled null pointer dereference. An unauthenticated attacker permitted to submit jobs to a shared printer queue can send a crafted Interne...
USN-8875-2: Linux kernel (NVIDIA) vulnerabilities
It was discovered that the i.MX clock driver in the Linux kernel did not properly handle certain memory allocation failure conditions, leading to a null pointer dereference vulnerability. A local attacker could possibly use this to cause a denial of service system crash. CVE-2022-3114 Several...
USN-8875-2 linux-nvidia vulnerabilities
It was discovered that the i.MX clock driver in the Linux kernel did not properly handle certain memory allocation failure conditions, leading to a null pointer dereference vulnerability. A local attacker could possibly use this to cause a denial of service system crash. CVE-2022-3114 Several...
CVE-2026-98380
In the Linux kernel, the following vulnerability has been resolved: net/sched: reject IDR error pointers when deleting actions tcfactiondelete drops the reference held by its lookup before calling tcfidrdeleteindex with the saved action index. An unlocked classifier can remove that action and...
DEBIAN-CVE-2026-98383
In the Linux kernel, the following vulnerability has been resolved: bpf: Disallow bpfskbpulldata for LWTSEG6LOCAL An LWTSEG6LOCAL program can invalidate its cached SRH with bpflwtseg6adjustsrh and then call bpfskbpulldata. The latter may reallocate skb-head, leaving the per-CPU SRH pointer...
CVE-2026-98383
In the Linux kernel, the following vulnerability has been resolved: bpf: Disallow bpfskbpulldata for LWTSEG6LOCAL An LWTSEG6LOCAL program can invalidate its cached SRH with bpflwtseg6adjustsrh and then call bpfskbpulldata. The latter may reallocate skb-head, leaving the per-CPU SRH pointer...
CVE-2026-98383
In the Linux kernel, the following vulnerability has been resolved: bpf: Disallow bpfskbpulldata for LWTSEG6LOCAL An LWTSEG6LOCAL program can invalidate its cached SRH with bpflwtseg6adjustsrh and then call bpfskbpulldata. The latter may reallocate skb-head, leaving the per-CPU SRH pointer...
CVE-2026-98202
A flaw was found in the Linux kernel's Synaptics RMI4 input driver. When system power management operations such as suspend or resume occur while an RMI4 device remains unbound, the driver attempts to access uninitialized driver data without proper verification. This issue leads to a null pointer...
CVE-2026-98383
In the Linux kernel , a vulnerability exists in the bpf subsystem where an LWT_SEG6LOCAL program can invalidate its cached SRH using bpf_lwt_seg6_adjust_srh() and subsequently call bpf_skb_pull_data(). This combination may cause bpf_skb_pull_data() to reallocate skb->head, leaving the per-CPU ...
CVE-2026-98380
A vulnerability exists in the Linux kernel 's net/sched component where tcf_idr_delete_index() fails to properly handle IDR error pointers . Specifically, if an unlocked classifier removes an action and reserves the same IDR slot with ERR_PTR(-EBUSY) between the lookup and deletion, the system tr...