CVE-2026-72392

A flaw was found in the Linux kernel's IPv6 networking component. A vulnerability exists where a NULL pointer dereference can occur in the fib6walkcontinue function during a multi-batch dump operation. This issue arises when a concurrent table insertion shifts existing entries, causing an incorre...

CVE-2026-74461

A flaw was found in the Linux kernel, specifically within the i2c: imx driver. This vulnerability occurs due to a timing issue during device unregistration, where a critical pointer is cleared before a related timer is properly canceled. If a pending interrupt triggers the timer after the pointer...

CVE-2026-74477

A flaw was found in the Linux kernel's uprobes mechanism. A local attacker could exploit a race condition by forking a task with a pending uretprobe while another CPU unregisters the uprobe. This could lead to a NULL pointer dereference in the hprobeexpire function, causing a kernel oops and...

CVE-2026-72341

A flaw was found in the Linux kernel's net/mlx5e component. A local attacker could exploit a race condition during the publication of channel statistics. On weakly-ordered architectures, this could lead to a null pointer dereference, causing a system crash and a denial of service. Mitigation...

CVE-2026-16817

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to a NULL pointer dereference...

CVE-2026-16817 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to a NULL pointer dereference...

EUVD-2026-62527

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to a NULL pointer dereference...

CVE-2026-16817

IBM AIX 7.2/7.3 and PowerVM VIOS 4.1 are vulnerable to a remote NULL pointer dereference, allowing unauthenticated attackers to cause denial of service (CVSS 7.5 HIGH). No affected component, patch version, or exploit details are provided in the documents.

CLSA-2026-1787149537 openjpeg2: Fix of 2 CVEs

CVE-2025-50952: fix NULL pointer dereference in opjdwtdecodetile - CVE-2023-39327: fix uncontrolled resource consumption when EPH markers are declared but missing...

MINI-J86M-HVPX-HVW6

Bulletin has no description...

resdata has Classic Buffer Overflow, Improper Validation of Array Index, NULL Pointer Dereference and Out-of-bounds Read

ImpactPrior to version 6.2.9 resdata would not correctly validate input in GRDECL files. The severity rating assumes that resdata is used to parse untrused files in a networking context such as a webservice. PatchesThe bug has been patched starting with version 6.2.9...

PYSEC-2026-3694 resdata has Classic Buffer Overflow, Improper Validation of Array Index, NULL Pointer Dereference and Out-of-bounds Read

Impact Prior to version 6.2.9 resdata would not correctly validate input in GRDECL files. The severity rating assumes that resdata is used to parse untrused files in a networking context such as a webservice. Patches The bug has been patched starting with version 6.2.9...

CVE-2026-74426

A flaw was found in the Linux kernel's AFS Andrew File System component. A local user can exploit this by triggering a specific memory allocation condition during a mount operation, leading to a null pointer dereference. This can cause the system to crash, resulting in a Denial of Service DoS...

CVE-2026-74321

A flaw was found in the btrfs file system component of the Linux kernel. This vulnerability occurs in the btrfsrundelayedrefs function when an error condition is not properly handled, leading to an invalid pointer dereference. A local attacker could potentially exploit this flaw to cause a system...

CVE-2026-74414

A flaw was found in the Linux kernel's HFS Plus hfsplus filesystem. A local user could trigger a null-pointer dereference by executing the setxattr function in userspace when the attributes file is not properly loaded during system mount. This vulnerability is caused by a duplicate attribute inod...

CVE-2026-74406

A flaw was found in the Linux kernel's Virtual Extensible LAN VXLAN component. A race condition can occur where the udptunnelsockrelease function sets a socket's user data to NULL while the vxlangropreparereceive function is still actively using it. This could lead to a null pointer dereference,...

K000162987: Linux kernel vulnerability CVE-2026-53313

Security Advisory Description In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Avoid NULL dereference in dcdmubsrv error paths In dcdmubsrvlogdiagnosticdata and dcdmubsrvenabledpiatrace. Both functions check: if !dcdmubsrv || !dcdmubsrv-dmub and then call...

CVE-2026-72316

A flaw was found in the Linux kernel's device mapper dm era target. When the metadataopen function fails to allocate memory, it returns a NULL pointer. The calling function, eractr, does not correctly validate this return, leading to a NULL pointer dereference when the metadata is accessed. This...

CVE-2026-72257

A flaw was found in the Linux kernel's ASoC Advanced Linux Sound Architecture System on Chip qcom q6apm component. A race condition can occur when the q6apmfreefragments function frees audio buffers while graphcallback attempts to access a freed buffer due to a late Digital Signal Processor DSP...

CVE-2026-72254

A flaw was found in the Linux kernel's netfilter subsystem. A local attacker could exploit a vulnerability where a fib expression in a netdev egress base chain incorrectly dereferences a NULL pointer. This can lead to a NULL pointer dereference, causing a system crash and resulting in a Denial of...