CVE-2026-102723: NULL Pointer Dereference

NULL Pointer Dereference on MSRP Attribute Table Exhaustion...

PT-2026-102790

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. affected versions not specified Description A NULL pointer dereference occurs when evicting the sole MSRP Media Service Resource Protocol attribute. A NULL pointer dereference is a software error where th...

CVE-2026-102724: NULL Pointer Dereference

NULL Pointer Dereference When Evicting the Sole MSRP Attribute...

Important: gstreamer1-plugins-base

Issue Overview: A NULL pointer dereference flaw was found in GStreamer's RTSP support library. The vulnerability occurs while parsing an Authorization or WWW-Authenticate header that uses Digest authentication. Specially crafted whitespace placement around a parameter's terminator can cause an...

ROS-20260929-73-0045

The vulnerability of the ipip6tunnelxmit function in the net/ipv6/sit.c module of the Linux kernel’s IPv6 implementation is related to the dereferencing of a pointer with an expired validity period. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality,...

CVE-2026-18746: NULL Pointer Dereference

parsewriteop in subsys/net/lib/lwm2m/lwm2mmessagehandling.c handles inbound CoAP WRITE/CREATE requests that carry a Block1 option. For the first block of a transfer it called initblockctx and then immediately stored the peer-selected block size with blockctx-ctx.blocksize = blocksize before...

ROS-20260929-73-0173

The vulnerability of the e1000tbishouldaccept function in the drivers/net/ethernet/intel/e1000/e1000main.c file of the Intel Ethernet network adapter driver for the Linux operating system is related to the use of a NULL pointer dereferencing. Exploiting this vulnerability could allow an attacker ...

CVE-2026-102623: NULL Pointer Dereference

A flaw was found in KubeVirt. An authenticated user with permission to create Virtual Machine Instances VMIs can cause a Denial of Service DoS by submitting a virtual machine definition with an empty ephemeral volume. The virt-controller component fails to properly validate the volume...

PT-2026-102777

PX4 Autopilot through 1.17.0 contains a NULL pointer dereference vulnerability in the sd stress command where the -b byte count parameter is parsed without validation before being passed to malloc and memset. Attackers with shell access, including through MAVLink, can supply invalid byte count...

NULL Pointer Dereference in CMP Client Revocation Response Handling

Issue summary: A CMP client that requests certificate revocation on the basis of a PKCS10 CSR may dereference a NULL pointer and terminate abnormally when processing a crafted revocation response. Impact summary: The NULL pointer dereference happens on a read which leads to a crash and a Denial o...

PT-2026-102719

Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.36.10, 1.37.6, 1.38.4, and 1.39.1, Envoy's ProdClusterManagerFactory::allocateConnPool dereferences transport socket options while selecting an HTTP/3 connection pool without first checking whether t...

PT-2026-107644

Name of the Vulnerable Software and Affected Versions Excelize versions 2.9.0 through 2.11.0 Description A nil pointer dereference occurs when the GetSlicers function is called on a crafted worksheet. The issue arises because the function checks for the presence of an extLst element but fails to...

Linux Distros Unpatched Vulnerability : CVE-2026-100890

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw has been found in Trusted Domain Project OpenDMARC up to 1.4.2. Affected by this vulnerability is the function opendmarcspfipv6explode in the library...

Amazon Linux 2 : gstreamer1-plugins-base (ALAS-2026-3930)

The version of gstreamer1-plugins-base installed on the remote host is prior to 1.18.4-5. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2026-3930 advisory. A NULL pointer dereference flaw was found in GStreamer's RTSP support library. The vulnerability occurs while...

Linux Distros Unpatched Vulnerability : CVE-2026-65412

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A null pointer dereference was addressed with improved input validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gat...

SUSE CVE-2026-93263

In the Linux kernel, the following vulnerability has been resolved: clk: eswin: Zero-initialize stack-allocated clkinitdata eswinclkregisterpll and eswinregisterclkdiv declare a struct clkinitdata on the stack and only initialize some of its fields parentdata respectively parenthws...

SUSE CVE-2026-97414

In the Linux kernel, the following vulnerability has been resolved: ASoC: mediatek: mt8365-afe-pcm: fix possible NULL-pointer dereferences in mt8365afesuspend mt8365afesuspend allocates the register backup buffer with devmkcalloc, but does not check for allocation failure before using the returne...

SUSE CVE-2026-97593

In the Linux kernel, the following vulnerability has been resolved: iommu/s390: Fix NULL dereference in iovatophys with ZPCITABLETYPERFX When using a 5-level translation table via ZPCITABLETYPERFX getrsofromiova returns NULL when the region-first entry is invalid. Yet in getrtofromiova the...

SUSE CVE-2026-97975

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hcisysfs: Fix NULL pointer dereference in devicedel A NULL pointer dereference in klistput occurs when a child device such as a BNEP network device in bnepsession is concurrently being unregistered while hciconndelsysf...

SUSE CVE-2026-97978

In the Linux kernel, the following vulnerability has been resolved: eth: ice: don't dereference pointers from TPprintk After forwarding net-next during the v7.3 merge window we started seeing: TRACE EVENT ERROR: Event icetxdimwork has double dereference in TPprintk: REC-qvector-tx.txring-qindex...