CVE-2026-93114

A flaw was found in the Linux kernel. A vulnerability exists in the platform/surface: acpi-notify component where a platform driver can be forced to match a device lacking an ACPI companion object. This can lead to a NULL pointer dereference when the sanprobe function attempts to access a...

CVE-2026-93107

A flaw was found in the Linux kernel's RDMA/rxe component. When a Queue Pair QP transitions to an error state during packet completion, the system may reprocess an already-completed packet. This can lead to duplicate data being delivered to user applications, causing data stream corruption...

CVE-2026-93073

A flaw was found in the Linux kernel's Direct Access DAX subsystem. A race condition in the daxholdernotifyfailure function allows a concurrent operation to clear a critical pointer holderops between two reads. This can lead to a null pointer dereference, potentially enabling a local attacker to...

CVE-2026-93050

A flaw was found in the Linux kernel's ipack: ipoctal module. This vulnerability arises from improper memory handling, specifically Use-After-Free UAF conditions and a NULL pointer dereference, when the device is removed while a terminal tty session is still active. A local attacker could exploit...

CVE-2026-12166_CVE-2026-12167_CVE-2026-12168

Multiple Local Privilege Escalation Vulnerabilities in Little Orbit GFAC Driver GFACSysx64.sys | ---|--- CVE IDs| CVE-2026-12166, CVE-2026-12167, CVE-2026-12168 Vendor| Little Orbit Product| GamersFirst Anti-Cheat GFAC Driver GFACSysx64.sys Affected Versions| No version information is embedded in...

CVE-2021-26690---Apache-mod_session

Patch diffing for CVE-2021-26690 - Apache modsession This vulnerability is a NULL pointer dereference within the modsession Apache's module. It will cause a denial of service for the child processes of Apache's httpd. By using a repetitive loop, each Apache workers will crash, leading to a denial...

CVE-2026-92492

A flaw was found in the Linux kernel's cpufreq/amd-pstate component. A local attacker could potentially trigger a NULL pointer dereference by performing a racing CPU hotplug or driver teardown operation. This occurs because certain functions, amdpstatepowersupplynotifier and amdpstateprofileset, ...

CVE-2026-90405

A flaw was found in the media: stm32: dcmi component of the Linux kernel. Improper error handling in the probe function can lead to a null pointer dereference. This issue occurs because dmareleasechannel is called before the dcmi-dmachan variable is properly assigned, potentially allowing a local...

CVE-2026-90400

A flaw was found in the Linux kernel's Multiple Device MD driver. A race condition exists where the system may attempt to remove or replace RAID array devices while they are still actively being used for input/output operations. This can lead to a null pointer dereference, causing the system to...

CVE-2026-90397

A flaw was found in the Linux kernel's Qualcomm qcom Secure Channel Manager SCM firmware component. This vulnerability allows for a NULL pointer dereference due to improper initialization of a shared memory pointer. An attacker could exploit this timing issue, potentially leading to a system cras...

CVE-2026-90374

A flaw was found in the Linux kernel's mt76 wifi driver. This vulnerability occurs due to improper validation of the bandidx field, which is used to index an array. A malicious actor could provide a corrupt or reserved descriptor value, leading to an out-of-bounds access or a NULL pointer...

CVE-2026-98477

A flaw was found in the Linux kernel's performance monitoring subsystem perf. When switching tasks during performance event handling, the kernel can pass an uninitialized NULL pointer to hardware performance monitoring drivers. A local user can exploit this issue during task execution to trigger ...

CVE-2026-98476

A flaw was found in the Linux kernel's s390 channel I/O CIO subsystem. When querying device utility strings, the kernel fails to verify that an associated channel path remains valid after its removal from the registry. A local user could exploit this condition during hardware reconfiguration,...

CVE-2026-45729

CVE-2026-45729 — ThorVG NULL Pointer Dereference via Malformed SVG Severity: CVSS 4.3 Medium — CWE-476 Advisory: GHSA-f863-8ghq-7h64 Fixed: ThorVG v1.0.5 Status: Patched / Disclosed Summary ThorVG's SVG parser dereferences a pointer that is never initialized when it encounters a truncated child...

CVE-2026-43841

A NULL pointer dereference vulnerability in the license manager service could allow an unauthenticated attacker to crash the service via the rpcrxfsm function...

CVE-2026-43842

A NULL pointer dereference vulnerability in the license manager service could allow an unauthenticated attacker to crash the service via the rpcrxfsm function when msglen is set to 0...

CVE-2026-43839

A NULL pointer dereference vulnerability in the logs management functionality could allow an unauthenticated attacker to crash the service...

CVE-2026-43840

A NULL pointer dereference vulnerability in the license manager service could allow an unauthenticated attacker to crash the service via the ondisconnected callback function...

CVE-2026-43842

A NULL pointer dereference vulnerability exists in the license manager service . An unauthenticated attacker can crash the service by triggering the rpc_rx_fsm function when the msglen parameter is set to 0. No specific software version or remediation details are provided in the documents. No inf...

CVE-2026-43842

A NULL pointer dereference vulnerability in the license manager service could allow an unauthenticated attacker to crash the service via the rpcrxfsm function when msglen is set to 0...