FreeRDP: FreeRDP: Denial of Service via crafted smartcard cache requests

A flaw was found in FreeRDP. When smartcard emulation is enabled, a remote attacker can send specially crafted smartcard cache requests to a FreeRDP client. This can lead to a null pointer dereference, causing the client process to terminate and disrupting active remote desktop sessions...

389-ds:1.4 security, bug fix, and enhancement update

An update is available for module.389-ds-base, 389-ds-base. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list 389 Directory Server is an LDAP version 3 LDAPv3...

RLSA-2026:64791 Critical: 389-ds:1.4 security, bug fix, and enhancement update

389 Directory Server is an LDAP version 3 LDAPv3 compliant server. The base packages include the Lightweight Directory Access Protocol LDAP server and command-line utilities for server administration. Security Fixes: 389-ds-base: 389-ds-base: heap buffer overflow via SASL wrapped-record length...

kernel: net: atm: fix crash due to unvalidated vcc pointer in sigd_send()

A flaw was found in the Linux kernel's Asynchronous Transfer Mode ATM networking component. A local attacker, by acting as a malicious signaling daemon, could send a specially crafted message containing an unvalidated pointer. This unvalidated pointer would be directly used by the kernel, leading...

PT-2026-88913

mrubyc through 4.0.0 contains a null pointer dereference vulnerability in the op enter handler in src/vm.c when processing untrusted bytecode. Attackers can craft malicious .mrb bytecode files with OP ENTER instructions at the top level to crash the embedding application and cause denial of servi...

CVE-2025-51619

A vulnerability in the Thesycon DPC Latency Checker driver dpc.sys thru 1.4.0 allows local unprivileged users to cause a denial-of-service BSOD condition on Windows systems. The driver exposes an IOCTL interface 0x81772008 that accepts user-controlled input without validating pointers before...

CVE-2025-51619

A vulnerability in the Thesycon DPC Latency Checker driver dpc.sys thru 1.4.0 allows local unprivileged users to cause a denial-of-service BSOD condition on Windows systems. The driver exposes an IOCTL interface 0x81772008 that accepts user-controlled input without validating pointers before...

Linux kernel Rocket IOCTL Use-After-Free

The vulnerability of the rocketioctlcreatebo function in the drivers/accel/rocket/rocketgem.c module of the Linux kernel’s acceleration device driver lies in the dereferencing of a pointer with an expired lifetime. Exploiting this vulnerability could allow an attacker to compromise the...

Linux Kernel mac80211 Stack Heap Buffer Overflow DoS

The vulnerability of the function ieee80211invokefastrx in the net/mac80211/rx.c module of the mac80211 stack in the Linux operating system is related to the dereferencing of a pointer with an expired validity period. Exploiting this vulnerability could allow an attacker to compromise the...

Linux USB driver Heap Buffer Overflow DoS

The vulnerability of the dwc2hcdurbdequeue function in the driver module/dwc2/hcd.c of the Linux operating system’s USB device driver framework is related to the dereferencing of a pointer with an expired validity period. Exploiting this vulnerability could allow an attacker to compromise the...

block layer DoS

The vulnerability in the bdevcacheinit function within the block/bdev.c module responsible for handling the kernel’s block layer is related to dereferencing pointers. Exploitation of this vulnerability may allow an attacker to cause a denial of service...

Linux Distros Unpatched Vulnerability : CVE-2026-82055

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A security issue exists in MongoDB's 2dsphere index key generation that can cause a server crash due to a null pointer dereference. When a specially crafted...

Linux IPv6 Kernel Heap Buffer Overflow DoS

The vulnerability of the ipv6hopioam function in the net/ipv6/exthdrs.c module of the Linux operating system’s IPv6 kernel implementation is related to the dereferencing of a pointer whose validity has expired. Exploiting this vulnerability could allow an attacker to compromise the confidentialit...

CVE-2026-86547: NULL Pointer Dereference

mrubyc through 4.0.0 contains a null pointer dereference vulnerability in the openter handler in src/vm.c when processing untrusted bytecode. Attackers can craft malicious .mrb bytecode files with OPENTER instructions at the top level to crash the embedding application and cause denial of service...

CVE-2026-80917: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: PCI: host-generic: Fix NULL pointer dereference on 32-bit CAM systems On 32-bit systems the config space is too large to ioremap in one go, so pciecamcreate maps each bus segment separately and relies on the -addbus callback...

CVE-2026-80917: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: PCI: host-generic: Fix NULL pointer dereference on 32-bit CAM systems On 32-bit systems the config space is too large to ioremap in one go, so pciecamcreate maps each bus segment separately and relies on the -addbus callback...

Linux kernel 9P Protocol Buffer Overflow

The vulnerability in the p9clientwalk function within the net/9p/client.c module of the 9P protocol implementation in the Linux kernel is related to dereferencing a pointer with an expired lifetime. Exploitation of this vulnerability may allow a remote attacker to compromise the confidentiality,...

PT-2026-89087

In the Linux kernel, the following vulnerability has been resolved: PCI: host-generic: Fix NULL pointer dereference on 32-bit CAM systems On 32-bit systems the config space is too large to ioremap in one go, so pci ecam create maps each bus segment separately and relies on the -add bus callback p...

RockyLinux 8 : 389-ds:1.4 (RLSA-2026:64791)

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:64791 advisory. 389-ds-base: 389-ds-base: heap buffer overflow via SASL wrapped-record length lower-bound underflow in sasliostartpacket CVE-2026-18355 389-ds-base:...

MiracleLinux 9 : kernel-5.14.0-687.31.1.el9_8 (AXSA:2026-1793:76)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1793:76 advisory. kernel: xfrm: Duplicate SPI Handling CVE-2025-39797 kernel: lib/buildid: use kernelread for sleepable context CVE-2026-23002 kernel: futex: Drop...