CVE-2026-98379

The Linux kernel contains a vulnerability in the netfilter: ip6t_rpfilter component. The ip6_route_lookup() function can return a route where rt6i_idev is NULL if an external nexthop device's MTU is lowered below IPV6_MIN_MTU, causing the inet6_dev to be torn down while the route remains in the F...

EUVD-2026-95534

In the Linux kernel, the following vulnerability has been resolved: netfilter: ip6trpfilter: reject routes without inet6dev ip6routelookup can return an error-free route whose rt6iidev is NULL. Lowering an external nexthop device's MTU below IPV6MINMTU tears down its inet6dev while fib6ifdown...

CVE-2021-24086-exp

CVE-2021-24086 هذا هو إثبات للمفهوم لـ CVE-2021-24086 "ثغرة رفض الخدمة في TCP/IP لويندوز "، وهي إلغاء مرجع NULL في tcpip.sys التي قامت مايكروسوفت بتصحيحها في فبراير 2021. وفقًا لهذه التغريدة، تم اكتشاف الثغرة بواسطة @piazzt. يمكن استغلالها عن بُعد عن طريق إرسال حزمة UDP ضارة عبر IPv6. يمكنك قراءة...

CVE-2021-24086

CVE-2021-24086 यह CVE-2021-24086 "विंडोज TCP/IP डिनायल ऑफ सर्विस भेद्यता" के लिए एक प्रूफ ऑफ कॉन्सेप्ट है, जो tcpip.sys में एक NULL डीरेफरेंस है जिसे माइक्रोसॉफ्ट ने फरवरी 2021 में पैच किया। इस ट्वीट के अनुसार, यह भेद्यता @piazzt द्वारा पाई गई है। इसे IPv6 पर दुर्भावनापूर्ण UDP पैकेट भेजकर दूरस्थ...

SMBGhost-SMBleed-scanner

SMBGhost CVE-2020-0796 और SMBleed CVE-2020-1206 स्कैनर c 2020 ZecOps, Inc. - https://www.zecops.com - हैकर्स की गलतियाँ खोजें केवल शैक्षिक और कॉर्पोरेट वातावरण में परीक्षण के लिए अभिप्रेत है। ZecOps इस कोड के लिए कोई जिम्मेदारी नहीं लेता, अपने जोखिम पर उपयोग करें। यदि आप सर्वर, एंडपॉइंट और मोबाइल...

cve-2026-23398-poc

مختبر: CVE-2026-23398 ICMP / ipnopmtudisc=3 مختبر قابل لإعادة الإنتاج لخلل نواة لينكس في icmptagvalidation إلغاء مرجع مؤشر فارغ عندما يكون net.ipv4.ipnopmtudisc = 3 ويصل ICMP من نوع Fragmentation Needed يحتوي رأسه الداخلي IPv4 على رقم بروتوكول بدون معالج في inetprotos. للاستخدام المصرح به فقط:...

CVE-2025-4476-Exploit

استغلال CVE-2025-4476-Exploit عميل اختبار صغير بلغة Python لإرسال طلبات HTTP GET مع ترويسة Authorization: Basic كبيرة الحجم. هذه الأداة مخصصة للاختبار المخبري والبحث في مشاكل تحليل الترويسات مثل أخطاء إلغاء الإشارة / أعطال الانهيار مثل CVE-2025-4476 في libsoup. توضح كيف يمكن لتبادل عميل-خادم مع...

CVE-2026-107170 M17n-lib: null dereference in minput_open_im() after failed m17n_init()

A flaw was found in m17n-lib. A partial failure during library initialization can leave an internal driver pointer uninitialized. Under specific error conditions, such as system resource exhaustion or database corruption, an application attempting to open an input method dereferences this null...

CVE-2026-107170 M17n-lib: null dereference in minput_open_im() after failed m17n_init()

A flaw was found in m17n-lib. A partial failure during library initialization can leave an internal driver pointer uninitialized. Under specific error conditions, such as system resource exhaustion or database corruption, an application attempting to open an input method dereferences this null...

CVE-2026-98302

The Linux kernel contains a NULL pointer dereference vulnerability in the skfp (FDD-II) driver. The issue occurs because skfp_ctl_set_mac_address() calls ResetAdapter() unconditionally without verifying if the network interface is running via netif_running(). On an interface that has never been i...

CVE-2026-98302

In the Linux kernel, the following vulnerability has been resolved: net: fddi: skfp: fix NULL deref when setting the MAC address while down skfpctlsetmacaddress calls ResetAdapter unconditionally, without checking netifrunning. ResetAdapter first calls cardstop, which sets smc-hw.hwstate to...

PT-2026-106549

In the Linux kernel, the following vulnerability has been resolved: sched ext: Fix NULL sched deref in kfunc sub-sched error paths When the root scheduler has sub-scheds attached, the COMPAT kfunc wrappers scx bpf select cpu and and scx bpf dsq insert vtime refuse the call and report to @p's...

CVE-2026-90782-s2opc-status-clobber

CVE-2026-90782 — إبطال الإشارة الفارغة NULL Dereference الناتج عن تشويش الحالة Status-Clobbering في S2OPC إثبات مفهوم PoC مستقل لـ CVE-2026-90782 في S2OPC Safe & Secure OPC. الثغرة في allocnotificationmessageitems S2OPC 1.7.3 والإصدارات الأقدم: يُستخدم متغير status مشترك واحد لكل من تخصيصات...

Astra Linux – Vulnerability found in Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: A NULL dereference in niwriteinode has been fixed. Syzbot reported a NULL dereference in niwrite inode. When creating a new inode, if the allocation fails in the miinit function called in the miformatnew function, mi-mr...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: net: sxgbe: fixed the potential NULL dereference in sxgberx. Currently, when skb is null, the driver prints an error and then dereferences skb on the next line. To fix this, we need to add a ‘break’ after the error message, so th...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

In the Linux kernel, the following vulnerabilities have been resolved: ipv6: fib6rules: avoided possible NULL dereferencing in fib6ruleaction. syzbot is capable of triggering the following crashes 1, caused by the unsafe use of ip6dstidev. Indeed, ip6dstidev can return NULL, and this value must...

Astra Linux – Vulnerability in krb5

In kdc/kdcpreauthec.c of the Key Distribution Center KDC in MIT Kerberos 5 also known as krb5, before versions 1.18.4 and 1.19.x, and before version 1.19.2, remote attackers could exploit a vulnerability that led to a NULL pointer dereferencing and a crash of the daemon. This occurs because the...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: net/rds: fixed the possible null dereference of cp The cp parameter may be null. Calling cp-cpconn would result in a null dereference. Simon Horman adds: Analysis: cp is a parameter of rdsrdmamap, and it is not reassigned. The...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: HID: Added guards for HIDCLAIMEDINPUT in raw event callbacks; these guards were previously missing. In commit 2ff5baa9b527 “HID: appleir: Fix potential NULL dereference at raw event handling”, we addressed the issue where raw eve...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: net: phy: micrel: Allow probing without .driverdata Currently, if the .probe element is present in the phydriver structure and there is no .driverdata, a NULL pointer dereferencing occurs. By inserting NULL checks for priv-type, ...