PT-2026-64343

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference occurs in the ethtool PHY component when a PHY driver is unbound via sysfs. This happens because phy remove clears the phydev-drv pointer without calling phy...

CVE-2026-64228: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: net: ethtool: phy: avoid NULL deref when PHY driver is unbound phydev-drv can become NULL while the phydevice is still attached to its netdevice, namely after the PHY driver is unbound via sysfs: echo /sys/bus/mdiobus/drivers/...

MiracleLinux 9 : php:8.3 (AXSA:2026-1333:01)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1333:01 advisory. PHP: PHP: Denial of Service via improper handling of signed characters in ctype functions CVE-2026-7258 PHP: PHP-FPM: PHP-FPM: Cross-Site Scripting...

AlmaLinux 8 : httpd:2.4 (ALSA-2026:42828)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:42828 advisory. httpd: incomplete fix for CVE-2023-38709 CVE-2024-42516 httpd: NULL pointer dereference via specially crafted request CVE-2026-29169 httpd: Apache HTTP...

openssl: NULL Dereference in Certificate Verification with OCSP Checking

A flaw was found in OpenSSL. When an application is configured with specific non-default settings for certificate verification, including both Online Certificate Status Protocol OCSP response checking and partial chain verification, a NULL dereference can occur. This vulnerability can be triggere...

openssl: Possible NULL Dereference in Password-Based CMS Decryption

A flaw was found in OpenSSL. A remote attacker could exploit a NULL pointer dereference vulnerability in the Cryptographic Message Syntax CMS decryption process by providing a specially crafted password-encrypted CMS message. This occurs because the keyDerivationAlgorithm field, which is optional...

CVE-2026-63945

A flaw was found in the Linux kernel's Bluetooth ISO Isochronous Stream subsystem. A race condition exists where the isosockcleartimer function can access connection data without proper locking, while another function, isoconndel, concurrently modifies the same data. This can lead to a NULL point...

libssh2:ssh2_client_fuzzer: Null-dereference READ in kex_diffie_hellman_sha

Project: https://github.com/cmeister2/libssh2.git https://github.com/libssh2/libssh2.git Detailed Report: https://oss-fuzz.com/testcase?key=4528762809810944 Project: libssh2 Fuzzing Engine: afl Fuzz Target: ssh2clientfuzzer Job Type: aflasanlibssh2 Platform Id: linux Crash Type: Null-dereference...

CVE-2026-64190

A flaw was found in the Linux kernel's team driver. A local attacker with CAPNETADMIN capabilities could exploit a race condition during a team device mode change. This occurs when the teamchangemode function clears internal operation pointers before safely restoring them, while the teamxmit...

EulerOS Virtualization 2.10.1 : expat (EulerOS-SA-2026-2818)

According to the versions of the expat package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : In libexpat before 2.8.1, the computational complexity of attribute name collision checks allows a denial of service via moderately...

EulerOS Virtualization 2.12.1 (EulerOS-SA-2026-2725)

According to the versions of the package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : libexpat before 2.7.5 allows an infinite loop while parsing DTD content.CVE-2026-32777 libexpat before 2.7.5 allows a NULL pointer...

RHEL 8 : httpd:2.4 (RHSA-2026:42828)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:42828 advisory. The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server. Security Fixes: httpd: incomplete fix...

EulerOS Virtualization 2.12.1 (EulerOS-SA-2026-2729)

According to the versions of the packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Buffer Over-read vulnerability in Apache HTTP Server.CVE-2026-34059 A NULL pointer dereference in moddavlock in Apache HTTP Server 2.4.66...

EulerOS Virtualization 2.10.1 : httpd (EulerOS-SA-2026-2822)

According to the versions of the httpd packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Allocation of Resources Without Limits or Throttling vulnerability in Apache HTTP Server's modmd via OCSP response data.CVE-2026-291...

CVE-2026-64190

In the Linux kernel, the following vulnerability has been resolved: net: team: fix NULL pointer dereference in teamxmit during mode change teamchangemode clears team-ops with memset before restoring safe dummy handlers via teamadjustops. A concurrent teamxmit running under RCU on another CPU can...

CVE-2026-64187 xfs: fail recovery on a committed log item with no regions

In the Linux kernel, the following vulnerability has been resolved: xfs: fail recovery on a committed log item with no regions If the first op of a transaction is a bare transaction header len == sizeofstruct xfstransheader, xlogrecoveraddtotrans adds an item but no region, leaving it on ritemq...

USN-8565-1: SQLite vulnerabilities

It was discovered that SQLite did not properly handle NULL pointer dereferences in the Session Extension when applying a corrupt changeset. An attacker could possibly use this issue to cause SQLite to crash, resulting in a denial of service. CVE-2026-50812 It was discovered that SQLite had a buff...

Linux Distros Unpatched Vulnerability : CVE-2026-64079

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - netfilter: xtables: allocate hook ops while under mutex arp/ip6tregistertable add the table to the per-netns list via xtregistertable before allocating the...

Linux Distros Unpatched Vulnerability : CVE-2026-64183

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: efi: Allocate runtime workqueue before ACPI init Since commit 5894cf571e14 acpi/prmt: Use EF...

Linux Distros Unpatched Vulnerability : CVE-2026-64099

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: drm/v3d: Fix use-after-free of CPU job query arrays on error path The CPU job ioctl's fail...