JLSEC-2026-92

lib/kadm5/kadmrpcxdr.c in MIT Kerberos 5 aka krb5 before 1.20.2 and 1.21.x before 1.21.1 frees an uninitialized pointer. A remote authenticated user can trigger a kadmind crash. This occurs because xdrkadm5principalentrec does not validate the relationship between nkeydata and the keydata array...

PT-2026-34691

lib/kadm5/kadm rpc xdr.c in MIT Kerberos 5 aka krb5 before 1.20.2 and 1.21.x before 1.21.1 frees an uninitialized pointer. A remote authenticated user can trigger a kadmind crash. This occurs because xdr kadm5 principal ent rec does not validate the relationship between n key data and the key dat...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: ImageMagick (UTSA-2026-007074)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-007074 advisory. ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-16 and 6.9.13-41, an uninitialized pointer...

Security update for ImageMagick

This update for ImageMagick fixes the following issues: CVE-2026-24484: denial of service vulnerability via multi-layer nested MVG to SVG conversion bsc1258790. CVE-2026-28494: missing bounds checks in the morphology kernel parsing functions can lead to a stack buffer overflow bsc1259447...

ImageMagick: ImageMagick: Denial of Service via uninitialized pointer dereference in JBIG decoder

A flaw was found in ImageMagick. This vulnerability, an uninitialized pointer dereference, exists in the JBIG decoder due to a missing check. A remote attacker could exploit this by providing a specially crafted image file, leading to a denial of service. This could make the ImageMagick applicati...

CLSA-2026-1775121288 ImageMagick: Fix of 7 CVEs

CVE-2026-28494: fix stack buffer overflow in morphology kernel parsing - CVE-2026-28691: fix uninitialized pointer dereference in JBIG decoder - CVE-2026-25989: fix off-by-one boundary check in CastDoubleToLong - CVE-2026-25985: fix memory allocation without limits in SVG decoder -...

ROS-20260403-73-0028

A vulnerability in the blocklayout/extenttree.c component of the Linux kernel is related to access to an uninitialized pointer. Exploitation of the vulnerability allows an attacker to cause a denial of service...

CLSA-2026-1774999144 ImageMagick: Fix of 7 CVEs

CVE-2026-28494: fix stack buffer overflow in morphology kernel parsing - CVE-2026-28691: fix uninitialized pointer dereference in JBIG decoder - CVE-2026-25989: fix off-by-one boundary check in CastDouble functions - CVE-2026-25985: fix memory allocation without limits in SVG decoder -...

Intel wireless driver module NVM Buffer Overflow

The vulnerability of the iwlmvmupdatemcc function in the drivers/net/wireless/intel/iwlwifi/mvm/nvm.c file of the Intel wireless driver module is related to the access to an uninitialized pointer. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity,...

Linux Kernel Heap Buffer Overflow DoS

The vulnerability of the biointegrityprep function in the block/bio-integrity-auto.c module, which supports the block-level kernel in the Linux operating system, relates to access to an uninitialized pointer. Exploiting this vulnerability could allow a attacker to cause a service failure...

Linux kernel Bluetooth Device DoS

The vulnerability of the btmtksdioprobe function in the drivers/bluetooth/btmtksdio.c file of the Linux Bluetooth device support driver module is related to the access to an uninitialized pointer. Exploiting this vulnerability could allow a attacker to cause a service failure...

Linux kernel Audio DoS

The vulnerability of the fcpavcTransaction function in the sound/firewire/fcp.c module of the Linux kernel’s audio subsystem is related to access to an uninitialized pointer. Exploiting this vulnerability could allow an attacker to cause a system failure...

PT-2026-40506

Уязвимость функции ctnetlink alloc expect ядра операционных систем Linux связана с доступом к неинициализированному указателю. Эксплуатация уязвимости может позволить нарушителю раскрыть конфиденциальную информацию...

PT-2026-40502

Уязвимость функции gso features check ядра операционных систем Linux связана с доступом к неинициализированному указателю. Эксплуатация уязвимости может позволить нарушителю получить несанкционированный доступ к конфиденциальной информации...

Linux Heap Buffer Overflow DoS

The vulnerability of the wcd938xmbhcinit function in the sound module/soc/codecs/wcd938x.c file, which is part of the Linux operating system’s SoC audio support, involves dereferencing an uninitialized pointer. Exploiting this vulnerability could allow an attacker to cause a system failure...

Linux kernel DMI Sysfs Register Handle Buffer Overflow DoS

The vulnerability of the dmisysfsregisterhandle function in the drivers/firmware/dmi-sysfs.c module of the Linux kernel’s firmware driver lies in the access to an uninitialized pointer. Exploiting this vulnerability could allow a attacker to cause a system failure...

Linux kernel Queue Pair Buffer Overflow DoS

The vulnerability of the functions qpnotifypeerlocal and qpnotifypeer in the drivers/misc/vmwvmci/vmciqueuepair.c module of the Linux kernel is related to access to an uninitialized pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux input device driver Heap Buffer Overflow DoS

The vulnerability of the iforceinitdevice function in the drivers/input/joystick/iforce/iforce-main.c file of the Linux device driver module relates to access to an uninitialized pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

kvm_arch_vcpu_ioctl() ARM64 Kernel DoS

The vulnerability of the kvmarchvcpuioctl function in the arch/arm64/kvm/arm.c module of the virtualization subsystem on the 64-bit ARM-based Linux operating system is related to access to an uninitialized pointer. Exploiting this vulnerability could allow a attacker to cause a service failure...

CVE-2026-23358

A flaw was found in the Linux kernel's drm/amdgpu driver. During slot reset error handling, the system could attempt to access an uninitialized list due to an uninitialized pointer. This could lead to system instability or a denial of service...