CVE-2026-38999

The Monkey server (through commit 4fb0c16 ) is vulnerable to a Null Pointer Dereference in the mk_sched_event_close function located within mk_server/mk_scheduler.c. An attacker can exploit this vulnerability by sending a crafted HTTP request to the server, resulting in a Denial of Service (DoS) ...

CVE-2026-38999

A Null Pointer Dereference in the mkschedeventclose function mkserver/mkscheduler.c of Monkey through commit 4fb0c16 allows attackers to cause a Denial of Service DoS via sending a crafted HTTP request to the server...

CVE-2026-77692: NULL Pointer Dereference

An attacker can cause named to abort by sending a crafted DNS-over-HTTPS request with a cryptographically invalid SIG0 record, and then closing the transport connection prematurely. This issue affects BIND 9 versions 9.20.0 through 9.20.27, 9.21.0 through 9.21.25, and 9.20.9-S1 through 9.20.27-S1...

CVE-2026-77692: NULL Pointer Dereference

An attacker can cause named to abort by sending a crafted DNS-over-HTTPS request with a cryptographically invalid SIG0 record, and then closing the transport connection prematurely. This issue affects BIND 9 versions 9.20.0 through 9.20.27, 9.21.0 through 9.21.25, and 9.20.9-S1 through 9.20.27-S1...

CVE-2026-89828: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix init ordering in amdgpuvrammgrinit drmmcgroupregisterregion is called before INITLISTHEAD and gpubuddyinit in amdgpuvrammgrinit. If it fails, the function returns early and bypasses those initializations. Since...

PT-2026-93895

A Null Pointer Dereference in the mk sched event close function mk server/mk scheduler.c of Monkey through commit 4fb0c16 allows attackers to cause a Denial of Service DoS via sending a crafted HTTP request to the server...

CVE-2026-89966: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: mm/hugetlbcma: fix null nodemask dereference in hugetlbcmaallocfrozenfolio allocbuddyhugetlbfoliowithmpol can pass a NULL nodemask to allocfreshhugetlbfolio as a fallback to allocate from all nodes. If order is gigantic,...

PT-2026-93645

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the damon apply min nr regions function where the system repeatedly splits regions to meet a user-defined minimum limit. The process relies on the damon split region a...

PT-2026-93893

Name of the Vulnerable Software and Affected Versions Open5GS versions prior to 2.8.1 Description A remote attack can cause a null pointer dereference in the PFCP Handler component. This occurs within the ogs pfcp parse volume measurement function located in the lib/pfcp/types.c library. A null...

PT-2026-93450

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference occurs when reading the /sys/kernel/debug/kfd/mqds endpoint while a process holds an active KFD queue. This happens because the for loop calling the debugfs sh...

CVE-2026-89958: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: s390/vfio-ap: Fix dereference matrixmdev-kvm without checking for NULL The apdriver structure has two fields which are function pointers to callbacks: .onconfigchanged: called at the start of the AP bus scan function to notify th...

PT-2026-93574

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference occurs during the ACPI probe of the dps310 pressure sensor. When the device is enumerated via its ACPI HID IFX3100, the i2c client get device id function retur...

CVE-2026-90012: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: spi: Fix DMA mapping ownership on partial map failure If RX mapping fails after TX mapping succeeds, spimapmsg unmaps TX but leaves txsgmapped set. If TX mapping fails on a later transfer, mappings created for earlier transfers...

PT-2026-93476

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the f2fs file system where the checkpoint merge feature can be enabled even if no checkpoint merge thread is active, such as during a read-only mount. In this state, t...

PT-2026-93653

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the SPI subsystem where a partial failure during DMA mapping can lead to incorrect ownership of the mapping. Specifically, if an RX mapping fails after a TX mapping...

CVE-2026-89884: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: media: platform: mtk-mdp3: fix NULL deref on failed SCP lookup Add the missing sanity check after looking up the SCP to avoid dereferencing a NULL-pointer in case its driver has not yet been bound...

CVE-2026-89955: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: s390/vfio-ap: Fix NULL deref in statusshow during queue probe When vfioapmdevprobequeue creates the sysfs attribute group, the queue's driver data has not yet been set. A concurrent read of the 'status' attribute can therefore ca...

CVE-2026-90039: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: NFSD: Guard admin state-revocation walks with NFSDNETUP Writing to /proc/fs/nfsd/unlockfilesystem, or sending the NFSDCMDUNLOCKFILESYSTEM or NFSDCMDUNLOCKEXPORT netlink command, walks the NFSv4 client hash tables to revoke open...

PT-2026-93525

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference occurs in the mtk-mdp3 platform media component. This happens when the system fails to look up the SCP System Control Processor because its driver has not yet...

PT-2026-93596

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference occurs in the s390/vfio-ap component during queue probe. When the vfio ap mdev probe queue function creates the sysfs attribute group, the driver data for the...