108 matches found
PT-2026-43845
In the Linux kernel, the following vulnerability has been resolved: staging: greybus: lights: avoid NULL deref gb lights light config stores channel count before allocating the channels array. If kcalloc fails, gb lights release iterates the non-zero count and dereferences light-channels, which i...
SUSE CVE-2026-43148
In the Linux kernel, the following vulnerability has been resolved: powerpc/smp: Add check for kcalloc failure in parsethreadgroups As kcalloc may fail, check its return value to avoid a NULL pointer dereference when passing it to ofpropertyreadu32array...
Linux Distros Unpatched Vulnerability : CVE-2026-43148
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - powerpc/smp: Add check for kcalloc failure in parsethreadgroups As kcalloc may fail, check its return value to avoid a NULL pointer dereference when passing it ...
CVE-2026-43148
A flaw was found in the Linux kernel. This vulnerability occurs in the powerpc/smp component due to a missing check for memory allocation failure. Specifically, if the kcalloc function fails to allocate memory within parsethreadgroups, a subsequent operation can attempt to use a NULL pointer. Thi...
CVE-2026-43148
In the Linux kernel, the following vulnerability has been resolved: powerpc/smp: Add check for kcalloc failure in parsethreadgroups As kcalloc may fail, check its return value to avoid a NULL pointer dereference when passing it to ofpropertyreadu32array...
CVE-2026-43148 powerpc/smp: Add check for kcalloc() failure in parse_thread_groups()
In the Linux kernel, the following vulnerability has been resolved: powerpc/smp: Add check for kcalloc failure in parsethreadgroups As kcalloc may fail, check its return value to avoid a NULL pointer dereference when passing it to ofpropertyreadu32array...
CVE-2026-43148
In the Linux kernel, the following vulnerability has been resolved: powerpc/smp: Add check for kcalloc failure in parsethreadgroups As kcalloc may fail, check its return value to avoid a NULL pointer dereference when passing it to ofpropertyreadu32array...
Linux kernel 安全漏洞
The Linux kernel is the kernel used by the Linux operating system developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from the powerpc/smp driver not checking the return value of kcalloc, potentially leading to null pointer...
PT-2026-37488
In the Linux kernel, the following vulnerability has been resolved: powerpc/smp: Add check for kcalloc failure in parse thread groups As kcalloc may fail, check its return value to avoid a NULL pointer dereference when passing it to of property read u32 array...
Astra Linux - уязвимость в linux-5.10
In the Linux kernel, the following vulnerability has been resolved: scsi: scsidebug: Don't call kcalloc if size arg is zero If the size arg to kcalloc is zero, it returns ZEROSIZEPTR. Because of that, for a following NULL pointer check to work on the returned pointer, kcalloc must not be called...
Astra Linux - уязвимость в linux-5.10, linux-6.1
In the Linux kernel, the following vulnerability has been resolved: wifi: wcn36xx: fix channel survey memory allocation size KASAN reported a memory allocation issue in wcn-chansurvey due to incorrect size calculation. This commit uses kcalloc to allocate memory for wcn-chansurvey, ensuring prope...
Astra Linux - уязвимость в linux-5.10
In the Linux kernel, the following vulnerability has been resolved: gpio: loongson-64bit: Fix incorrect NULL check after devmkcalloc Fix incorrect NULL check in loongsongpioinitirqchip. The function checks chip-parent instead of chip-irq.parents...
Astra Linux - уязвимость в linux-5.15
A issue was discovered in the Linux kernel through version 5.16-rc6. The function imxregisteruartclocks in drivers/clk/imx/clk.c lacks a check on the return value of kcalloc, which can lead to a null pointer dereferencing...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-010721)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-010721 advisory. An issue was discovered in the Linux kernel through 5.16-rc6. imxregisteruartclocks in drivers/clk/imx/clk.c lacks check of the return value of kcalloc and will caus...
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-006945)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-006945 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/mediatek: mtkdrmcrtc: Add checks for devmkcalloc As the devmkcalloc may return NULL, the retu...
Unity Linux 20.1050e Security Update: kernel (UTSA-2026-006695)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-006695 advisory. In the Linux kernel, the following vulnerability has been resolved: wifi: mwifiex: Initialize the chanstats array to zero The adapter-chanstats array is initialized ...
CVE-2026-23366
In the Linux kernel, the following vulnerability has been resolved: drm/client: Do not destroy NULL modes 'modes' in drmclientmodesetprobe may fail to kcalloc. If this occurs, we jump to 'out', calling modesdestroy on it, which dereferences it. This may result in a NULL pointer dereference in the...
CVE-2026-23366
The CVE-2026-23366 entry concerns the Linux kernel DRM client component. A vulnerability in drm_client_modeset_probe can lead to a NULL pointer dereference when ‘modes’ fails to be allocated with kcalloc; if an error path calls modes_destroy on this NULL pointer, a crash can occur. The issue is r...
CVE-2026-23218 gpio: loongson-64bit: Fix incorrect NULL check after devm_kcalloc()
In the Linux kernel, the following vulnerability has been resolved: gpio: loongson-64bit: Fix incorrect NULL check after devmkcalloc Fix incorrect NULL check in loongsongpioinitirqchip. The function checks chip-parent instead of chip-irq.parents...
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-992914)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992914 advisory. In the Linux kernel, the following vulnerability has been resolved: ASoC: qcom: Add checks for devmkcalloc As the devmkcalloc may return NULL, the return value needs...