CVE-2026-93261

In the Linux kernel, the following vulnerability has been resolved: locking/lockdep: Fix NULL pointer dereference in locksetclass registerlockclass can return NULL when the lock class pool is exhausted, graphlock fails, or key validation fails. However, locksetclass uses the return value directly...

PT-2026-104872

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: preserve non-DOS attribute bits in system.dos attrib BUG A corrupted ntfs3 image can hit a NULL function pointer call in generic perform write after toggling system.ntfs attrib and then overwriting system.dos attrib on...

PT-2026-105002

In the Linux kernel, the following vulnerability has been resolved: spi: Add NULL check for spi get device id in spi get device match data Prevent NULL pointer dereference when spi get device id returns NULL, which can happen when using driver override without matching SPI ID entry...

PT-2026-105003

In the Linux kernel, the following vulnerability has been resolved: crypto: ixp4xx - fix buffer chain unwind on allocation failure chainup buffers builds a linked list of buffer descriptors for a scatterlist. If dma pool alloc fails while constructing the list, the current code sets buf to NULL a...

Linux Distros Unpatched Vulnerability : CVE-2026-97506

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - crypto: ixp4xx - fix buffer chain unwind on allocation failure chainupbuffers builds a linked list of buffer descriptors for a scatterlist. If dmapoolalloc fail...

PT-2026-97961

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A null pointer dereference occurs in the bcm2835 pinctrl probe function when devm pinctrl register fails. In this scenario, the system attempts to call gpiochip remove before gpiochip ad...

PT-2026-98073

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A kernel NULL pointer dereference occurs in the ntfs3 file system when processing a corrupted image. The issue is triggered when system.ntfs attrib is toggled and subsequently system.dos...

CVE-2026-97446: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ACPICA: Fix NULL pointer dereference in acpinscustompackage acpinscustompackage unconditionally dereferences the first element of the package to read the BIX version number, without checking for NULL: if Elements-Common.Type !=...

RHEL 9 : kernel (RHSA-2026:70459)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:70459 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: crypto: afalg - Disallow...

CVE-2026-97414: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ASoC: mediatek: mt8365-afe-pcm: fix possible NULL-pointer dereferences in mt8365afesuspend mt8365afesuspend allocates the register backup buffer with devmkcalloc, but does not check for allocation failure before using the returne...

PT-2026-104935

In the Linux kernel, the following vulnerability has been resolved: tty: serial: 8250: protect against NULL uart-port.dev in register serial8250 register 8250 port conditionally copies uart-port.dev from up-port.dev only when up-port.dev is non-NULL: if up-port.dev uart-port.dev = up-port.dev;...

Linux Kernel Security Vulnerabilities

Versions of the Linux kernel prior to 6.18.53 contain security vulnerabilities. This vulnerability stems from the serial8250register8250port function in drivers/tty/serial/8250/8250core.c, which does not perform a null pointer check when uart-port.dev is NULL. Subsequently, the hasacpicompanion...

CVE-2026-93796

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: pcie: null RX pointers after free When iwlpcietxinit fails after RX init, nic init unwinds via iwlpcierxfree. The freed RX members stayed non-NULL on the live transport object, so later teardown or retry could touc...

CVE-2026-97414

In the Linux kernel, the following vulnerability has been resolved: ASoC: mediatek: mt8365-afe-pcm: fix possible NULL-pointer dereferences in mt8365afesuspend mt8365afesuspend allocates the register backup buffer with devmkcalloc, but does not check for allocation failure before using the returne...

CVE-2026-93273

In the Linux kernel, the following vulnerability has been resolved: regulator: tps6594: Fix device node reference leaks in multiphase loop In tps6594regulatorprobe, the multi-phase configuration loop calls offindnodebyname to find buck nodes by name, and ofgetparent twice to navigate to the PMIC...

CVE-2026-88373

libde265 commit 4d45a6b contains a NULL pointer dereference vulnerability in the NAL parsing path. When de265pushNAL is called with a zero-length NAL unit, the resulting NALunit may retain a NULL backing buffer, which is subsequently passed as the destination argument to memcpy in NALunit::setdat...

ROS-20260924-73-0055

The vulnerability of the ntfsnew inode function in the fs/ntfs3/fsntfs.c file of the NTFS file system in the Linux operating system is related to the dereferencing of a NULL pointer. Exploiting this vulnerability could allow an attacker to cause service failures remotely...

Linux Kernel Security Vulnerabilities

The Linux kernel version 4.16 contains a security vulnerability. This vulnerability stems from improper lifecycle management of the f2fs module’s f2fsgckthread component. Competition conditions occur during re-mounting or shutdown processes, potentially leading to access to an empty sbi-gcthread...

ROS-20260924-73-0077

The vulnerability of the replacenexthopsingle function in the net/ipv4/nexthop.c module of the Linux operating system’s IPv4 kernel implementation is related to the assignment of the NULL pointer. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity,...

PT-2026-98052

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description In the ALSA es18xx component, the snd es18xx mixer function creates controls using snd ctl new1. If snd ctl new1 fails and returns NULL, the system attempts to store bookkeeping pointers...