Important: Red Hat Security Advisory: redhat-ds:12 security update

An update for the redhat-ds:12 module is now available for Red Hat Directory Server 12.2 E4S for RHEL 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

389-ds-base: 389-ds-base: NULL pointer dereference in deref control plugin BER parser

A flaw was found in 389 Directory Server. The dereference control plugin does not check for allocation failure before using a BER structure, allowing an unauthenticated remote attacker to crash the LDAP server when the system is under memory pressure...

Linux Distros Unpatched Vulnerability : CVE-2026-72094

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: dma-buf: dma-fence: Fix potential NULL pointer dereference The commit mentioned in the fixes...

Linux Distros Unpatched Vulnerability : CVE-2026-74256

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bpf, sockmap: fix integer overflow in bpfmsgpopdata bounds check start and len are u32, so u64 last = start + len; evaluates start + len in 32-bit and wraps...

Linux Distros Unpatched Vulnerability : CVE-2026-72095

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - dma-fence: Make dmafencededuparray robust against 0-count input dmafencededuparray returns 1 when called with numfences == 0: the for-loop body never executes, ...

Linux Distros Unpatched Vulnerability : CVE-2026-74426

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - afs: fix NULL pointer dereference in afsgettree afsallocsbi uses kzalloc for memory allocation. And, if ctx-dynroot is not null, as-cell and as-volume are null...

Linux Distros Unpatched Vulnerability : CVE-2026-72468

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - xprtrdma: Initialize reid before removal registration rpcrdmacreateid registers ep-rern with the rpcrdma ibclient before returning the new rdmacmid to...

Linux Distros Unpatched Vulnerability : CVE-2026-72453

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - regcache: Do not overwrite error code when finalizing cache after error During regcache initialization, if an error occurs in the cacheops-populate callback, an...

Linux Distros Unpatched Vulnerability : CVE-2026-72091

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - accel/amdxdna: reject user command submission without a command BO amdxdnadrmsubmitexecbuf passes the user-supplied command BO handle straight into...

Linux Distros Unpatched Vulnerability : CVE-2026-74259

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - cifs: remove all cifs files before kill super Cifs files may be put into fileinfoputwq during umounting cifs. After umount done, cifsFileInfoputfinal is called,...

Linux Distros Unpatched Vulnerability : CVE-2026-72034

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fhandle: reject detached mounts in capablewrtmount The recent fhandle RCU fix moved the mount namespace capability check into capablewrtmount, so a non-NULL...

Linux Distros Unpatched Vulnerability : CVE-2026-72502

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - tcp: ipv6: clamp default adverting MSS to avoid GSOBYFRAGS 0xFFFF When MTU is large, ip6defaultadvmss can return IPV6MAXPLEN 65535. This is interpreted by TCP a...

Linux Distros Unpatched Vulnerability : CVE-2026-72362

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/xe/pt: Fix NULL pointer dereference in xeptzapptesentry The page-table walk framework may pass a NULL child pointer for unpopulated entries. xeptzapptesentr...

Linux Distros Unpatched Vulnerability : CVE-2026-72296

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: ife: require ETHHLEN to be pullable in ifedecode ife decode may return after making only the outer IFE header and metadata pullable. The caller then passes...

haproxy: HAProxy: Denial of Service via HPACK dynamic table insertions

A flaw was found in HAProxy. An attacker can trigger HPACK dynamic table insertions under memory pressure, leading to a null pointer dereference in the hpackdhtinsert function. This can cause HAProxy worker processes to crash, resulting in a denial of service DoS...

CVE-2026-72097

A flaw was found in the Linux kernel's dm-verity component. A possible NULL pointer dereference can occur in the dmverityloadpinisbdevtrusted function if a device lacks a table. This vulnerability could allow a local attacker to cause a system crash, leading to a Denial of Service DoS...

CVE-2026-72094

A flaw was found in the Linux kernel's dma-fence subsystem. This vulnerability arises from a timing issue on weakly ordered platforms, where memory operations related to fence signaling and pointer nullification can occur out of order. This can lead to a NULL pointer dereference, potentially...

CVE-2026-72091

A flaw was found in the Linux kernel's AMD XDNA accelerator driver. An attacker with local access to the accelerator node can trigger a null pointer dereference by submitting a command with an invalid command buffer object. This can lead to a kernel crash, resulting in a denial of service DoS for...

haproxy: HAProxy: Denial of Service via HPACK dynamic table insertions

A flaw was found in HAProxy. An attacker can trigger HPACK dynamic table insertions under memory pressure, leading to a null pointer dereference in the hpackdhtinsert function. This can cause HAProxy worker processes to crash, resulting in a denial of service DoS...

haproxy: HAProxy: Denial of Service via HPACK dynamic table insertions

A flaw was found in HAProxy. An attacker can trigger HPACK dynamic table insertions under memory pressure, leading to a null pointer dereference in the hpackdhtinsert function. This can cause HAProxy worker processes to crash, resulting in a denial of service DoS...