CVE-2026-80542

A flaw was found in the drm/amd/display component of the Linux kernel. The amdgpudmcrtcsetvblank function attempts to dereference a NULL pointer when vblank is enabled or queried before a display stream is properly attached. This can be triggered by a local attacker running specific graphics test...

CVE-2026-80564

A flaw was found in the Linux kernel's gve component. A local user can trigger a NULL pointer dereference by attempting to use the ptp adjfine function, which has a missing implementation. This vulnerability can lead to a system crash, resulting in a Denial of Service DoS. Mitigation Mitigation f...

CVE-2026-63380

A flaw was found in Libevent, an event notification library. This vulnerability allows a local attacker to trigger a null pointer dereference during specific error handling within the evwsnewsession function. By inducing an allocation or locking failure, an attacker can cause the application to...

Security update for openssl, openssl-3

This update for openssl, openssl-3 fixes the following issues: OpenSSL is updated to 3.5.0 in SLE-15-SP7: jscPED-16072 Enables Post-Quantum Cryptography PQC TLS support Security issues fixed: CVE-2026-42764: NULL pointer dereference in QUIC server initial packet handling bsc1266347 CVE-2026-34182...

CVE-2026-19023

A flaw was found in HDF5. The h5dump tool, used for dumping HDF5 file contents, is vulnerable to an untrusted pointer dereference. An attacker could craft a malicious HDF5 file containing a variable-length string dataset. When this file is processed in binary output mode, it can lead to a denial ...

CVE-2026-74741

A flaw was found in the Linux kernel's ngbe network driver. In systems configured for non-MSI-X interrupt handling, such as legacy INTx or single MSI modes, a missing initialization of a pointer can lead to a NULL pointer dereference. This vulnerability can cause the system to crash, resulting in...

CVE-2026-74740

A flaw was found in the Linux kernel's network scheduler net/sched: actapi. A Time-of-Check to Time-of-Use TOCTOU race condition exists where a pointer can be cleared between two reads. This allows a concurrent operation to cause a NULL dereference, potentially leading to a system crash and Denia...

CVE-2026-80520

A flaw was found in the ovpn module of the Linux kernel. The ovpncryptokillkey function incorrectly assumes that both crypto key slots are always populated. This can lead to a NULL dereference if a peer has only one installed key or if the function attempts to remove a key that is not present. A...

CVE-2026-81579

In WibuKey for Windows before version 6.71, an untrusted pointer dereference in the WibuKey264.sys kernel driver for 64-bit Windows allows an attacker to exploit a write-what-where primitive, enabling local privilege escalation. This can be leveraged to execute arbitrary code, run an administrato...

CVE-2026-80577

A flaw was found in the Linux kernel's drm/panthor driver. When the panthorfwloadsectionentry function processes zero-sized firmware sections, it can leave a memory pointer uninitialized. Subsequent operations that attempt to access this uninitialized memory can lead to a null pointer dereference...

CVE-2026-74738

A flaw was found in the regmap: sdw-mbq component of the Linux kernel. This vulnerability occurs when the regmapsdwmbqpollbusy function attempts to call an unset readablereg callback. If a device responds with COMMANDIGNORED, it can lead to a NULL function pointer dereference. This could...

Invalid Pointer Dereference in CMP Server via Crafted protectionAlg

...

CVE-2026-81579 An untrusted Pointer Dereference can be exploited to escalate privileges by an unprivileged user on Windows

In WibuKey for Windows before version 6.71, an untrusted pointer dereference in the WibuKey264.sys kernel driver for 64-bit Windows allows an attacker to exploit a write-what-where primitive, enabling local privilege escalation. This can be leveraged to execute arbitrary code, run an administrato...

CVE-2026-81579 An untrusted Pointer Dereference can be exploited to escalate privileges by an unprivileged user on Windows

In WibuKey for Windows before version 6.71, an untrusted pointer dereference in the WibuKey264.sys kernel driver for 64-bit Windows allows an attacker to exploit a write-what-where primitive, enabling local privilege escalation. This can be leveraged to execute arbitrary code, run an administrato...

EUVD-2026-66984

In WibuKey for Windows before version 6.71, an untrusted pointer dereference in the WibuKey264.sys kernel driver for 64-bit Windows allows an attacker to exploit a write-what-where primitive, enabling local privilege escalation. This can be leveraged to execute arbitrary code, run an administrato...

CVE-2026-81579

WibuKey for Windows (versions before 6.71 ) is affected by an untrusted pointer dereference in the WibuKey2_64.sys kernel driver (64-bit Windows), which exposes a write-what-where primitive. This enables a local unprivileged user to escalate privileges, potentially executing arbitrary code, spawn...

EUVD-2026-66586

In the Linux kernel, the following vulnerability has been resolved: ovpn: fix NULL dereference when killing missing key ovpncryptokillkey assumes both crypto slots are populated and dereferences each slot before checking it. That is not guaranteed: a peer can have only one installed key, and the...

EUVD-2026-66571

In the Linux kernel, the following vulnerability has been resolved: net: ngbe: fix NULL pointer dereference in non-MSI-X interrupt enabling In non-MSI-X mode such as legacy INTx or single MSI, wx-msixentry is not allocated or initialized. Calling NGBEINTRMISCwx dereferences wx-msixentry-entry,...

CVE-2026-74734

A flaw was found in the Linux kernel's FireWire IEEE 1394 Open Host Controller Interface OHCI driver. During the error handling path of the driver's probe function, a NULL pointer dereference can occur in the arcontextrelease function if the context was not properly initialized. This vulnerabilit...

CVE-2026-80524

A flaw was found in the Linux kernel's OP-TEE Open Portable Trusted Execution Environment Fast Fault-tolerant Architecture FFA component. A local attacker could exploit a missing null check when allocating protected memory. Under specific memory pressure conditions, this could lead to a null...