CVE-2026-78148

A flaw was found in the ggml-RPC Server component of llama.cpp. A remote attacker can exploit this vulnerability by performing a specific manipulation, leading to a null pointer dereference. This can result in a Denial of Service DoS, making the affected system unavailable. Mitigation For systems...

CVE-2026-98358

A flaw was found in the Linux kernel's iSCSI Extensions for Remote Direct Memory Access iSER driver. A remote storage target can trigger a Denial of Service DoS by sending an unexpected remote invalidation response for write operations transmitted as immediate data. In this scenario, the initiato...

CVE-2026-98356

A flaw was found in the Linux kernel's Broadcom NetXtreme bnxtre driver. During device initialization, the driver fails to verify that memory allocation for the Data Center Bridging DCB workqueue succeeded. Under low-memory conditions where this setup fails, a subsequent asynchronous DCB...

CVE-2026-98355

A flaw was found in the Linux kernel's RDMA Remote Direct Memory Access subsystem. When connection path initialization fails in the RDMA Transport RTRS driver, error cleanup routines invoke event tracing before the associated object name is set. This issue leads to a null pointer dereference,...

CLSA-2026-1791118211 libxml2: Fix of 2 CVEs

CVE-2025-7425: clear the attribute type through the live attr argument in xmlRemoveID instead of id-attr, which read the xmlID already freed by xmlHashRemoveEntry - CVE-2022-23308: normalize the ID value in xmlRemoveID after it is read from the attribute instead of before, where the pointer was...

SUSE CVE-2026-66081

Access of Uninitialized Pointer vulnerability in Apache Thrift cglib bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

SUSE CVE-2026-98220

In the Linux kernel, the following vulnerability has been resolved: schedext: Fix NULL sched deref in kfunc sub-sched error paths When the root scheduler has sub-scheds attached, the COMPAT kfunc wrappers scxbpfselectcpuand and scxbpfdsqinsertvtime refuse the call and report to @p's scheduler:...

SUSE CVE-2026-98314

In the Linux kernel, the following vulnerability has been resolved: ALSA: pcm: set timer-privatedata before registering the PCM timer sndpcmtimerinit calls snddeviceregister to link the new struct sndtimer into the global timer list while it still carries hw.cresolution = sndpcmtimerresolution an...

SUSE CVE-2026-98355

In the Linux kernel, the following vulnerability has been resolved: RDMA/rtrs: guard against null kobj name In the client, if initpath errors, the callee tries to clean up with rtrscltcloseconns. However, this can lead to calling the event tracing code with cltpath-kobj-name being NULL and thus...

PT-2026-107536

Name of the Vulnerable Software and Affected Versions m17n-lib affected versions not specified Description A flaw in the text processing mechanism allows an attacker to provide specially crafted or truncated UTF-8 input. This triggers an unhandled null pointer dereference, which is a condition...

ROS-20261007-73-0419

The vulnerability in the kernel-lt is related to the swapping of the zero pointer. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20261007-73-0075

The vulnerability of the intelenginesresetdefaultsubmission function in the drivers/gpu/drm/i915/gt/intelenginecs.c file of the Direct Rendering Infrastructure DRI driver for the Linux operating system is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to...

ROS-20261007-73-0002

The vulnerability in the kernel-lt is related to the swapping of the zero pointer. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20261007-73-0373

The vulnerability in the kernel-lt is related to the swapping of the zero pointer. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20261007-73-0057

The vulnerability of the asusreportfixup function in the driver module/hid/hid-asus.c file of the Linux kernel’s device subsystem interface driver is related to the release of an incorrect pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

ROS-20261007-73-0067

The vulnerability of the bonddebugrlbhashshow function in the drivers/net/bonding/bonddebugfs.c file of the Linux kernel network device driver is related to the use of pointers. Exploiting this vulnerability could allow an attacker to cause a system failure...

ROS-20261007-73-0038

The vulnerability in the kernel-lt is related to the swapping of the zero pointer. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20261007-73-0174

The vulnerability in the kernel-lt is related to the swapping of the zero pointer. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20261007-73-0043

The vulnerability in the kernel-lt is related to the swapping of the zero pointer. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2026-107170: NULL Pointer Dereference

A flaw was found in m17n-lib. A partial failure during library initialization can leave an internal driver pointer uninitialized. Under specific error conditions, such as system resource exhaustion or database corruption, an application attempting to open an input method dereferences this null...