Linux USB Device Driver Heap Buffer Overflow DoS

The vulnerability of the usblpprobe function in the drivers/usb/class/usblp.c file of the Linux device driver for USB devices is related to the access to an uninitialized pointer. Exploiting this vulnerability could allow a attacker to cause a service failure...

Linux cdns_resume() Buffer Overflow DoS

The vulnerability of the cdnsresume function in the drivers/usb/cdns3/core.c file of the Linux device driver framework relates to access to an uninitialized pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

K000163141: NLnet Labs Unbound vulnerability CVE-2026-42959

Security Advisory Description NLnet Labs Unbound up to and including version 1.25.0 has a denial of service vulnerability in the DNSSEC validator that can lead to a crash given malicious upstream replies. When Unbound constructs chase-reply messages for validation, the code uses the wrong counter...

F5 Networks BIG-IP : NLnet Labs Unbound vulnerability (K000163141)

The version of F5 Networks BIG-IP installed on the remote host is prior to 17.1.3.5 / 17.5.1.9 / 21.1.0.2. It is, therefore, affected by a vulnerability as referenced in the K000163141 advisory. NLnet Labs Unbound up to and including version 1.25.0 has a denial of service vulnerability in the...

SUSE CVE-2026-72110

In the Linux kernel, the following vulnerability has been resolved: bpf,fork: wipe -bpfstorage before bailouts that access it Currently, copyprocess can bail out to freetask before p-bpfstorage has been initialized, with this call graph shown here for the !CONFIGMEMCG case: copyprocess...

ROS-20260827-73-0028

The vulnerability of the iwlmvmupdatemcc function in the drivers/net/wireless/intel/iwlwifi/mvm/nvm.c file of the Intel wireless driver module is related to the access to an uninitialized pointer. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity,...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098935)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098935 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: ebtables: zero chainstack array sashiko reports: looking at ebtables table translation...

CVE-2026-54920 OpenEXR: Integer overflow and uninitialized pointer cause invalid delete in OpenEXRUtil image resize

OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. In versions 3.4.0 through 3.4.12, a reachable assertion failure in the HTJ2K decode path allows a crafted HTJ2K-compressed EXR file to cause an unconditional process abo...

CVE-2026-54920 OpenEXR: Integer overflow and uninitialized pointer cause invalid delete in OpenEXRUtil image resize

OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. In versions 3.4.0 through 3.4.12, a reachable assertion failure in the HTJ2K decode path allows a crafted HTJ2K-compressed EXR file to cause an unconditional process abo...

ROS-20260825-73-0024

The vulnerability of the wcd938xmbhcinit function in the sound module/soc/codecs/wcd938x.c file, which is part of the Linux operating system’s SoC audio support, involves dereferencing an uninitialized pointer. Exploiting this vulnerability could allow an attacker to cause a system failure...

ROS-20260825-73-0003

The vulnerability of the rfkillgpioacpiprobe function in the net/rfkill/rfkill-gpio.c module, which implements networking functions of the Linux kernel, relates to access to an uninitialized pointer. Exploiting this vulnerability could allow a malicious actor to cause a service failure remotely...

netfilter Heap Buffer Overflow DoS

The vulnerability of the buildpacketmessage function in the net/netfilter/nfnetlinklog.c module of the netfilter component of the Linux operating system is related to the access to an uninitialized pointer. Exploiting this vulnerability could allow a attacker to cause a service failure...

netfilter Process SDP Data Compromise

The vulnerability of the processsdp function in the net/netfilter/nfconntracksip.c module of the netfilter component in the Linux operating system’s kernel is related to the access to an uninitialized pointer. Exploiting this vulnerability could allow an attacker to compromise the confidentiality...

Linux kernel cryptographic accelerator driver Heap Buffer Overflow DoS

The vulnerability of the f81604readintcallback function in the drivers/crypto/ccp/sev-dev-tsm.c file of the Linux kernel cryptographic accelerator driver relates to access to an uninitialized pointer. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

Smb File System Heap Buffer Overflow DoS

The vulnerability of the smb2unlink function in the fs/smb/client/smb2inode.c file of the Smb file system in the Linux operating system is related to the access to an uninitialized pointer. Exploiting this vulnerability could allow a attacker to cause a service failure...

rtw_BIP_verify() Heap Buffer Overflow DoS

The vulnerability of the rtwBIPverify function in the drivers/staging/rtl8723bs/core/rtwsecurity.c module relates to access to an uninitialized pointer. Exploiting this vulnerability could allow an attacker to compromise the integrity and accessibility of protected information...

amdgpupciSlotReset Function Kernel Data Compromise

The vulnerability of the amdgpupciSlotReset function in the drivers/gpu/drm/amd/amdgpu/amdgpudevice.c source code of the Direct Rendering Infrastructure DRI AMD GPU kernel for the Linux operating system is related to the access to an uninitialized pointer. Exploiting this vulnerability could allo...

Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to a DOS vulnerability in NLnet Labs Unbound [CVE-2026-42959]

Summary IBM Watson Speech Services Cartridge is vulnerable to a DOS vulnerability in NLnet Labs Unbound, due to a flaw in the DNSSEC validator that can lead to a crash given malicious upstream replies. CVE-2026-42959. NLnet Labs Unbound is used in our service speech utilities. This vulnerability...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: AppArmor: Fixed an issue where an uninitialized pointer was passed to auditloguntrustedstring. Commit 4a134723f9f1 “AppArmor: moved the check for aanull file to cover all cases”. It corrected a minor bug where pathname might...

Firefox ESR DoS

The vulnerability of the JavaScript Engine component in Firefox ESR, Firefox, and the Thunderbird email client relates to access to an uninitialized pointer. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...