Linux Kernel Security Vulnerabilities

The Linux kernel version 2.6.33 contains security vulnerabilities. These vulnerabilities arise from the failure to restore the TTYIOERROR flag when the ttyport is activated. This can lead to I/O attempts when the port has disappeared or during power failures. When the TTY ioctl competes with...

Linux Kernel Security Vulnerabilities

The Linux kernel version 5.15 contains a security vulnerability. This vulnerability stems from the mctpadddev function, which links the new mctpdev to dev-mctpptr before assigning the value to mdev-dev. When a reader accesses the device during this period, it may dereference a netdevice pointer...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.0 contains security vulnerabilities. These vulnerabilities stem from the failure to check whether dcsink is empty during MST mode validation. The functions dmdpmstisportsupportmode and getconvfrlbw access dcsink that has been asynchronously cleared, which may lead to nu...

CLSA-2026-1792249415 kernel-uek: Fix of 17 CVEs

ipv4: validate checksumstart before completing checksum CVE-2026-99999 - nbd: defer config unlock in nbdgenlconnect CVE-2025-68366 - nvdimm: virtiopmem: refcount requests for token lifetime CVE-2026-93196 - tracing: Set the trace clock before registering the histogram trigger CVE-2026-97935 -...

SUSE-SU-2026:24323-1 Security update for expat

This update for expat fixes the following issues: - CVE-2025-59375: denial of service resource consumption caused by processing malformed small documents bsc1249584. - CVE-2026-24515: NULL dereference CWE-476 due to function XMLExternalEntityParserCreate failing to copy the encoding handler data...

CLSA-2026-1791920953 cups: Fix of 2 CVEs

CVE-2026-107885: fix denial of service by not letting an in-flight Send-Document suppress submission timeouts of unrelated held jobs beyond MultipleOperationTimeout - CVE-2026-107890: fix cupsd NULL pointer dereference caused by repeated IPP group tags in job creation requests...

cups: Fix of 2 CVEs

CVE-2026-107885: fix denial of service by not letting an in-flight Send-Document suppress submission timeouts of unrelated held jobs beyond MultipleOperationTimeout - CVE-2026-107890: fix cupsd NULL pointer dereference caused by repeated IPP group tags in job creation requests...

CLSA-2026-1791875496 httpd: Fix of CVE-2026-63686

CVE-2026-63686: modxml2enc: NULL pointer dereference on charset conversion failure...

Linux Distros Unpatched Vulnerability : CVE-2026-57486

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - pupnp is an SDK for development of UPnP device and control point applications. Prior to 2.0.2, ixmlNodecompare in ixml/src/node.c passes the nullable nodeValue,...

Important: kernel

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: netfilter: nfnatsip: rewind offset when NAT shrinks the packet CVE-2026-100070 In the Linux kernel, the following vulnerability has been resolved: RDMA/srpt: Fix srptallocrwctxs unwind counters CVE-2026-100075 In...

NULL Pointer Dereference

Overview Affected versions of this package are vulnerable to NULL Pointer Dereference through the ValidateResponse process when a response header is declared with content instead of schema. An attacker can cause a process crash by sending a request to an affected endpoint, resulting in a nil...

CVE-2026-111710

Netcore NR256CN through 1.5.140116 contains a NULL pointer dereference vulnerability in the Boa web server's userauth function that allows unauthenticated attackers to crash the server via a malformed Authorization header. Attackers can send a Basic Authorization value lacking a colon, such as on...

EUVD-2026-103002

Netcore NR256CN through 1.5.140116 contains a NULL pointer dereference vulnerability in the Boa web server's userauth function that allows unauthenticated attackers to crash the server via a malformed Authorization header. Attackers can send a Basic Authorization value lacking a colon, such as on...

CVE-2026-111710 Netcore NR256CN through 1.5.140116 Boa Web Server NULL Pointer Dereference DoS

Netcore NR256CN through 1.5.140116 contains a NULL pointer dereference vulnerability in the Boa web server's userauth function that allows unauthenticated attackers to crash the server via a malformed Authorization header. Attackers can send a Basic Authorization value lacking a colon, such as on...

CVE-2026-111710

Netcore NR256CN through 1.5.140116 is affected by a NULL pointer dereference vulnerability within the Boa web server's user_auth() function. An unauthenticated attacker can trigger this vulnerability by sending a malformed Basic Authorization header that lacks a colon (e.g., decoding to a single ...

SUSE CVE-2026-111129

Open Asset Import Library assimp through 6.0.5 contains a NULL pointer dereference vulnerability in the Ogre3D binary mesh importer's OgreBinarySerializer::ReadAnimationKeyFrames handling of unvalidated animation track targets. Attackers can supply a crafted .mesh file with a morph animation trac...

DEBIAN-CVE-2026-57486

pupnp is an SDK for development of UPnP device and control point applications. Prior to 2.0.2, ixmlNodecompare in ixml/src/node.c passes the nullable nodeValue, namespaceURI, prefix, and localName fields directly to strcmp. Non-namespaced attributes created by ixmlDocumentcreateAttribute...

CVE-2026-57486

pupnp is an SDK for development of UPnP device and control point applications. Prior to 2.0.2, ixmlNodecompare in ixml/src/node.c passes the nullable nodeValue, namespaceURI, prefix, and localName fields directly to strcmp. Non-namespaced attributes created by ixmlDocumentcreateAttribute...

CVE-2026-48741

libIEC61850 is an open-source implementation of IEC 61850 client and server protocols including MMS, GOOSE, Sampled Values, and R-Session. Prior to 1.6.2, alternateArrayAccess in src/mms/isomms/server/mmsreadservice.c does not validate an alternate-access sub-array range when numberOfElements is...

CVE-2026-57486

The pupnp SDK for UPnP development applications is vulnerable to a NULL pointer dereference in ixml/src/node.c prior to version 2.0.2 . The ixmlNode_compare function incorrectly passes nullable fields (such as nodeValue, namespaceURI, prefix, and localName) of non-namespaced attributes directly t...