PT-2026-64707

In the Linux kernel, the following vulnerability has been resolved: ALSA: cmipci: check snd ctl new1 return value snd ctl new1 can return NULL when memory allocation fails. snd cmipci spdif controls does not check the return value before dereferencing kctl-id.device, which can lead to a NULL...

PT-2026-64552

In the Linux kernel, the following vulnerability has been resolved: usbip: vudc: fix NULL deref in vep dequeue vep alloc request wasn't initializing vrequest-udc, so cancellations on the FunctionFS AIO path were arriving in vep dequeue without a valid UDC reference. Since vrequest-udc is never...

Linux Distros Unpatched Vulnerability : CVE-2026-64457

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - virtiopci: fix vq info pointer lookup via wrong index Unbinding a virtio balloon device: echo virtio0 /sys/bus/virtio/drivers/virtioballoon/unbind triggers a NU...

Linux Distros Unpatched Vulnerability : CVE-2026-64258

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fuse-uring: remove request-less entries from entwreqqueue to fix NULL deref If a copy into the userspace ring buffer fails, a request will be terminated and...

Linux Distros Unpatched Vulnerability : CVE-2026-64325

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: mt76: mt7921/mt7925: fix NULL dereference in CSA beacon This patch is based on a BUG as reported by Bongani Hlope at...

PT-2026-64637

In the Linux kernel, the following vulnerability has been resolved: mm: swap cgroup: fix NULL deref in lookup swap cgroup id on swapless host lookup swap cgroup id passes swap cgroup ctrltype.map to swap cgroup id lookup without checking that the type was ever registered via swap cgroup swapon. O...

PT-2026-64638

In the Linux kernel, the following vulnerability has been resolved: mm: shrinker: fix NULL pointer dereference in debugfs shrinker debugfs add creates both "count" and "scan" debugfs files unconditionally. That assumes every shrinker implements both count objects and scan objects, which is not...

PT-2026-64703

In the Linux kernel, the following vulnerability has been resolved: ALSA: gus: check snd ctl new1 return value snd ctl new1 can return NULL when memory allocation fails. snd gf1 pcm volume control does not check the return value before dereferencing kctl-id.index, which can lead to a NULL pointer...

PT-2026-64705

In the Linux kernel, the following vulnerability has been resolved: ALSA: es1938: check snd ctl new1 return value snd ctl new1 can return NULL when memory allocation fails. snd es1938 mixer does not check the return value before dereferencing the pointer, which can lead to a NULL pointer...

Linux Distros Unpatched Vulnerability : CVE-2026-55990

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In NLnet Labs Unbound 1.7.0 up to and including 1.25.1, when the 'dnscrypt:' clause lists more 'dnscrypt- provider-cert:' files than there are matching...

Linux Distros Unpatched Vulnerability : CVE-2026-64480

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ALSA: ice1712: check sndctlnew1 return value sndctlnew1 can return NULL when memory allocation fails. The ice1712 driver calls sndctlnew1 without checking the...

Linux Distros Unpatched Vulnerability : CVE-2026-64511

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ACPI: NFIT: core: Fix possible NULL pointer dereference After commit 9b311b7313d6 ACPI: NFIT: Install Notify handler before getting NFIT table, acpinfitprobe...

Linux Distros Unpatched Vulnerability : CVE-2026-64216

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - netfs: Fix potential UAF in netfsunlockabandonedreadpages netfsunlockabandonedreadpagesrreq accesses the index of the folios it is wanting to unlock and compare...

Linux Distros Unpatched Vulnerability : CVE-2026-64416

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mm: swapcgroup: fix NULL deref in lookupswapcgroupid on swapless host lookupswapcgroupid passes swapcgroupctrltype.map to swapcgroupidlookup without checking th...

Linux Distros Unpatched Vulnerability : CVE-2026-64486

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ALSA: cmipci: check sndctlnew1 return value sndctlnew1 can return NULL when memory allocation fails. sndcmipcispdifcontrols does not check the return value befo...

GO-2026-5525 GoBGP has a panic in AdjRib.Update via malformed BGP Update message (Nil Pointer Dereference) in github.com/osrg/gobgp

GoBGP has a panic in AdjRib.Update via malformed BGP Update message Nil Pointer Dereference in github.com/osrg/gobgp...

DEBIAN-CVE-2026-64234

In the Linux kernel, the following vulnerability has been resolved: tty: serial: pchuart: add check for dmaalloccoherent Add a check for dmaalloccoherent failure to prevent a potential NULL pointer dereference in dmahandlerx. Properly release DMA channels and the PCI device reference using a goto...

CVE-2026-64228

In the Linux kernel, the following vulnerability has been resolved: net: ethtool: phy: avoid NULL deref when PHY driver is unbound phydev-drv can become NULL while the phydevice is still attached to its netdevice, namely after the PHY driver is unbound via sysfs: echo...

DEBIAN-CVE-2026-64215

In the Linux kernel, the following vulnerability has been resolved: drm/msm/a6xx: Check kzalloc return in a8xxhfisendperftable Check the return value of kzalloc to prevent a NULL pointer dereference on allocation failure. Patchwork: https://patchwork.freedesktop.org/patch/721342/...

NULL Pointer Dereference

Overview Affected versions of this package are vulnerable to NULL Pointer Dereference and out-of-bounds read in the native XXHash implementations reached through XXHashFactory.nativeInstance, where SafeUtils.checkRange skips all array validation when len == 0 and lets invalid references or ranges...