SUSE CVE-2025-15514

Ollama 0.11.5-rc0 through current version 0.13.5 contain a null pointer dereference vulnerability in the multi-modal model image processing functionality. When processing base64-encoded image data via the /api/chat endpoint, the application fails to validate that the decoded data represents valid...

kernel: mm: kmem: fix a NULL pointer dereference in obj_stock_flush_required()

A null pointer dereference exists in the linux kernel such that in objstockflushrequired:stock-cachedobjcg can be reset between the check and dereference, resulting in damage to the availability of the system...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a lack of null pointer checking, which could lead to null pointer dereferencing...

ROS-20260114-7314

A vulnerability in the drmdpmstupreqwork function of the drivers/gpu/drm/display/drmdpmsttopology.c driver supporting the Direct Rendering Infrastructure DRI of the Linux kernel is related to NULL pointer dereferencing. Exploitation of the vulnerability may allow an attacker to affect...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-001723)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001723 advisory. dotlsgetsockopt in net/tls/tlsmain.c in the Linux kernel through 6.2.6 lacks a locksock call, leading to a race condition with a resultant use-after-free or NULL...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-001699)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001699 advisory. A NULL pointer dereference flaw was found in the Linux kernels Amateur Radio AX.25 protocol functionality in the way a user connects with the protocol. This flaw...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001062)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001062 advisory. Race condition in the installuserkeyrings function in security/keys/processkeys.c in the Linux kernel before 3.8.3 allows local users to cause a denial of service NU...

Linux Distros Unpatched Vulnerability : CVE-2025-71130

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: drm/i915/gem: Zero-initialize the eb.vma array in i915gemdoexecbuffer Initialize the eb.vma...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a failure to check if startnode is NULL, which could result in a null pointer dereference...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from incorrectly checking a pre-call function, which could lead to a null pointer dereference...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-001757)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001757 advisory. A Null pointer dereference problem was found in idafree in lib/idr.c in the Linux Kernel. This issue may allow an attacker using this library to cause a denial of...

Adobe Substance 3D Modeler 1.22.5 Multiple Vulnerabilities (APSB26-08)

The version of Adobe Substance 3D Modeler installed on the remote host is prior to 1.22.5. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB26-08 advisory. - Substance3D - Modeler versions 1.22.4 and earlier are affected by an out-of-bounds write vulnerability that...

Adobe Illustrator < 29.8.4 / 30.0 < 30.1 Multiple Vulnerabilities (APSB26-03)

The version of Adobe Illustrator installed on the remote Windows host is prior to 29.8.4, 30.1. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB26-03 advisory. - Illustrator versions 29.8.3, 30.0 and earlier are affected by an Untrusted Search Path vulnerability th...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001673)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001673 advisory. A NULL pointer dereference vulnerability was found in netlinkdump. This issue can occur when the Netlink socket receives the messagesendmsg for the XFRMMSGGETSA,...

Linux Distros Unpatched Vulnerability : CVE-2025-71120

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - SUNRPC: svcauthgss: avoid NULL deref on zero length gsstoken in gssreadproxyverf A zero length gsstoken results in pages == 0 and intoken-pages0 is NULL. The co...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a failure to check the length of the gsstoken, which could result in a null pointer dereference...

PT-2026-2864

In the Linux kernel, the following vulnerability has been resolved: drm/msm: adreno: fix deferencing ifpc reglist when not declared On plaforms with an a7xx GPU not supporting IFPC, the ifpc reglist if still deferenced in a7xx patch pwrup reglist which causes a kernel crash: Unable to handle kern...

ROS-20260114-7312

A vulnerability in the relocateonefolio function of the fs/btrfs/relocation.c module of the Linux kernel btrfs file system support is related to pointer dereferencing. Exploitation of the vulnerability could allow an attacker to cause a denial of service...

CVE-2026-22693

A null pointer dereference vector has been discovered in the harfbuzz package. A null pointer dereference vulnerability exists in the SubtableUnicodesCache::create function located in src/hb-ot-cmap-table.hh:1672-1673. The function fails to check if hbmalloc returns NULL before using placement ne...

CVE-2026-21899

CryptoLib provides a software-only solution using the CCSDS Space Data Link Security Protocol - Extended Procedures SDLS-EP to secure communications between a spacecraft running the core Flight System cFS and a ground station. Prior to version 1.4.3, in base64urlDecode, padding-stripping...