PT-2026-104989

In the Linux kernel, the following vulnerability has been resolved: ACPICA: Fix NULL pointer dereference in acpi ns custom package acpi ns custom package unconditionally dereferences the first element of the package to read the BIX version number, without checking for NULL: if Elements-Common.Typ...

PT-2026-104901

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Avoid DPMS-on for phantom stream Why & How Calling dc update planes and stream separately for stream and its phantom stream causes a NULL pointer dereference, since the phantom is destroyed on the first call. Ski...

CVE-2026-93274

In the Linux kernel, the following vulnerability has been resolved: pinctrl: bcm2835: Don't remove an unregistered GPIO chip If the devmpinctrlregister function fails, bcm2835pinctrlprobe calls gpiochipremove before gpiochipadddata has registered the GPIO chip. This means that upon failure the...

CVE-2026-97446: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ACPICA: Fix NULL pointer dereference in acpinscustompackage acpinscustompackage unconditionally dereferences the first element of the package to read the BIX version number, without checking for NULL: if Elements-Common.Type !=...

CVE-2026-97482: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: gokuudc: avoid NULL deref of dev-driver in INTUSBRESET log gokuirq handles a number of bus events under a single ep0 path. It already guards the gadget driver suspend/resume callbacks against a NULL -driver: if...

CVE-2026-97482

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: gokuudc: avoid NULL deref of dev-driver in INTUSBRESET log gokuirq handles a number of bus events under a single ep0 path. It already guards the gadget driver suspend/resume callbacks against a NULL -driver: if...

CVE-2026-93236

In the Linux kernel, the following vulnerability has been resolved: media: meson: vdec: fix NULL pointer deref in vdectryfmtcommon When VIDIOCTRYFMT is called with an unsupported pixel format on the OUTPUT queue, vdectryfmtcommon falls back to V4L2PIXFMTMPEG2. However, if a distro has locally...

PT-2026-98052

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description In the ALSA es18xx component, the snd es18xx mixer function creates controls using snd ctl new1. If snd ctl new1 fails and returns NULL, the system attempts to store bookkeeping pointers...

CVE-2026-97506

In the Linux kernel, the following vulnerability has been resolved: crypto: ixp4xx - fix buffer chain unwind on allocation failure chainupbuffers builds a linked list of buffer descriptors for a scatterlist. If dmapoolalloc fails while constructing the list, the current code sets buf to NULL and...

PT-2026-98101

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference exists in the goku irq function within the goku udc USB gadget driver. The issue occurs when the controller raises an INT USBRESET event before a gadget driver...

PT-2026-104889

In the Linux kernel, the following vulnerability has been resolved: net: appletalk: fix NULL pointer dereference in aarp send ddp aarp send ddp calls atalk find dev addrdev in the LocalTalk fast path without checking for NULL. When the device has no AppleTalk interface configured dev-atalk ptr ==...

PT-2026-104928

In the Linux kernel, the following vulnerability has been resolved: mmc: davinci: avoid NULL deref of host-data in IRQ handler mmc davinci irq returns early only when both host-cmd and host-data are NULL: if host-cmd == NULL && host-data == NULL ... return IRQ NONE; So we may legitimately reach t...

PT-2026-98121

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference exists in the mmc davinci irq function within the Linux kernel. The issue occurs because the function only returns early when both host-cmd and host-data are...

PT-2026-105003

In the Linux kernel, the following vulnerability has been resolved: crypto: ixp4xx - fix buffer chain unwind on allocation failure chainup buffers builds a linked list of buffer descriptors for a scatterlist. If dma pool alloc fails while constructing the list, the current code sets buf to NULL a...

PT-2026-98147

Name of the Vulnerable Software and Affected Versions libde265 versions prior to commit 4d45a6b Description A NULL pointer dereference exists in the NAL parsing path. When the function de265 push NAL is called with a zero-length NAL unit, the resulting NAL unit may retain a NULL backing buffer...

PT-2026-104872

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: preserve non-DOS attribute bits in system.dos attrib BUG A corrupted ntfs3 image can hit a NULL function pointer call in generic perform write after toggling system.ntfs attrib and then overwriting system.dos attrib on...

CVE-2026-97439

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: preserve non-DOS attribute bits in system.dosattrib BUG A corrupted ntfs3 image can hit a NULL function pointer call in genericperformwrite after toggling system.ntfsattrib and then overwriting system.dosattrib on the...

Linux Distros Unpatched Vulnerability : CVE-2026-97414

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ASoC: mediatek: mt8365-afe-pcm: fix possible NULL-pointer dereferences in mt8365afesuspend mt8365afesuspend allocates the register backup buffer with devmkcallo...

Linux Distros Unpatched Vulnerability : CVE-2026-97506

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - crypto: ixp4xx - fix buffer chain unwind on allocation failure chainupbuffers builds a linked list of buffer descriptors for a scatterlist. If dmapoolalloc fail...

CVE-2026-97516: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: wifi: rtw88: Add NULL check for chip-edccath in rtwfwadaptivityresult It was recently reported that rtwfwadaptivityresult in fw.c dereferences rtwdev-chip-edccath without a NULL check. The issue is that devices with the 8821CE ch...