Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: Bluetooth: Fixed null-ptr-deref in l2capsockresumecb. syzbot reported null-ptr-deref in l2capsockresumecb. 0 l2capsockresumecb has a similar issue that was fixed in commit 1bff51ea59a9 “Bluetooth: fixed use-after-free errors i...

Astra Linux – Vulnerability in OpenSSL

Issue summary: An invalid or NULL pointer dereference can occur in an application processing a malformed PKCS12 file. This can lead to a Denial of Service attack. Impact summary: An application processing a malformed PKCS12 file may inadvertently dereference an invalid or NULL pointer during memo...

Astra Linux – Vulnerability in edk2

Null pointer dereferencing in Tianocore EDK2 may allow an authenticated user to potentially enable privilege escalation through local access...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: ocfs2: Fixed a NULL pointer dereference in ocfs2assuretranscredits. BREAK A direct write over unwritten extents can cause the kernel to panic in ocfs2assuretranscredits, especially when the journal aborts during DIO completion...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: tty: serial: pchuart: added a check for dmaalloccoherent A check for a failure with dmaalloccoherent has been added to prevent a potential NULL pointer dereferencing in dmahandlerx. Properly release DMA channels and the reference...

Astra Linux – Vulnerability in krb5

In MIT Kerberos 5 also known as krb5, prior to version 1.22.3, there was a NULL pointer dereferencing issue when an application called gssacceptseccontext on a system where the NegoEx mechanism was registered in /etc/gss/mech. An unauthenticated remote attacker could trigger this issue, causing t...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: media: em28xx: Fix for use-after-free in em28xxv4l2open The em28xxv4l2open function reads dev-v4l2 without holding the dev-lock. This creates a race condition that can lead to errors in em28xxv4l2init and em28xxv4l2fini. Both...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: netfilter: xtnat: rejects unsupported target families The xtnat SNAT and DNAT target handlers assume that the IP-family conntrack state is present. This allows them to dereference a NULL pointer when instantiated from an...

Astra Linux – Vulnerability in Linux, Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: hwmon: w83791d Fixed NULL pointer dereferencing by removing unnecessary structure fields. If the driver reads a value that is sufficient for the condition: val & 0x08 && !val & 0x80 && val & 0x7 == val 4 & 0x7 NULL pointer...

BIT-APACHE-2026-46729 Apache HTTP Server: mod_heartmonitor denial of service

NULL Pointer Dereference vulnerability in Apache HTTP Servers modheartmonitor over unicast listener. This issue affects Apache HTTP Server: from 2.4.0 through 2.4.68...

Security Bulletin: Due to AIX, IBM Cloud Pak System is affected by NULL pointer dereference vulnerability

Summary Due to AIX, IBM Cloud Pak System is affected by NULL pointer dereference vulnerability. Vulnerability was addressed in OS Image for AIX IBM Cloud Pak System version 2.3.5.1. Vulnerability Details CVEID:CVE-2025-49795 DESCRIPTION: A NULL pointer dereference vulnerability was found in libxm...

CVE-2026-93316: NULL Pointer Dereference

If BuildKit daemon is started with --cdi-disabled it can lead to daemon panic when builds try to use CDI devices. This can happen maliciously or by accident...

AlmaLinux 9.2 [TuxCare] Security Update: mutt Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1791192215)

The AlmaLinux 9.2 host has a package installed that is affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1791192215 advisory. - mutt before 2.3.2 sometimes uses strfcpy instead of memcpy for the IMAP authcram MD5 digest. CVE-2026-43859 - mutt before 2.3.2...

openSUSE 16: libIex-3_2-31 / libIex-3_2-31-x86-64-v3 / libIlmThread-3_2-31 / etc (openSUSE-SU-2026:22013-1)

The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:22013-1 advisory. This update for openexr fixes the following issue: - CVE-2026-88384: NULL pointer dereference in the C++ attribute parsing path when a specially crafted...

Linux Distros Unpatched Vulnerability : CVE-2026-66859

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NULL Pointer Dereference, Use of Uninitialized Variable vulnerability in Apache Thrift cglib bindings. This issue affects Apache Thrift: before 0.25.0. Users ar...

Linux Distros Unpatched Vulnerability : CVE-2026-87117

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NULL pointer dereference vulnerability in Apache Thrift PHP bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to versi...

SUSE SLES15 Security Update : openssl-3 (SUSE-SU-2026:4412-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4412-1 advisory. - CVE-2026-35189: Excessive Memory Allocation in Relative CRLDP Processing bsc1280589. - CVE-2026-54872: Timing Side-Channel in...

SUSE SLES15: libopenssl-3-devel / libopenssl-3-fips-provider / etc (SUSE-SU-2026:4419-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4419-1 advisory. - CVE-2026-35189: Excessive Memory Allocation in Relative CRLDP Processing bsc1280589. - CVE-2026-54872: Timing Side-Channel in...

SUSE SLES15 Security Update : openssl-3 (SUSE-SU-2026:4413-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4413-1 advisory. - CVE-2026-35189: Excessive Memory Allocation in Relative CRLDP Processing bsc1280589. - CVE-2026-54872: Timing Side-Channel in...

SUSE CVE-2026-75805

Issue summary: A CMP client that requests certificate revocation on the basis of a PKCS10 CSR may dereference a NULL pointer and terminate abnormally when processing a crafted revocation response. Impact summary: The NULL pointer dereference happens on a read which leads to a crash and a Denial o...