CVE-2026-98477: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: perf/core: Fix NULL pmuctx passed to pmu-schedtask perfpmuschedtask returns early when cpuctx-taskctx is set, and cpc-taskepc is only non-NULL while a task context is scheduled in on this CPU. perfpmuschedtask therefore always...

CVE-2026-98651: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: KVM: s390: Properly handle NULL pointer in datcondsetstoragekey Some callers pass NULL as oldkey. Calling pagecondsetstoragekey will cause that NULL pointer to get dereferenced. Fix by checking for NULL and assigning the pointer ...

CVE-2026-98752: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: tty: port: fix ttyportttyvhangup race Drivers rely on ttyportttyvhangup to synchronously hang up their ports before tearing down resources as part of deregistration e.g. on physical disconnect. If ttyportttyvhangup races with...

CVE-2026-98676: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: iio: adc: ade9000: fix NULL pointer dereference in clkout registration ade9000setupclkout passes NULL as the register address when registering a divider clock. During clock registration, the common clock framework calls...

Linux Distros Unpatched Vulnerability : CVE-2026-98616

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - eth: fbnic: reset numnapi when the napi vectors are freed fbn-numnapi is the count of live napi vectors, each of which owns an IRQ. The PM path had freed them...

CVE-2026-98618: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: eth: fbnic: Handle maximum standalone channels Standalone channels use one NAPI vector for each Tx and Rx queue. fbnic's allocation path excludes FBNICMAXTXQS from that layout. A 64-Tx/64-Rx configuration therefore records 128...

CVE-2026-98616: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: eth: fbnic: reset numnapi when the napi vectors are freed fbn-numnapi is the count of live napi vectors, each of which owns an IRQ. The PM path had freed them without clearing the count. fbnicpmsuspend tears the datapath down via...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.11 contains security vulnerabilities. These vulnerabilities arise from the failure to reset the numnapi count when releasing the napi vector, resulting in null pointer dereferencing within the kernel...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.2 contains security vulnerabilities. These vulnerabilities stem from the use of NULL pmuctx in the perfpmuschedtask function, which may lead to undefined behavior due to null pointer dereferencing in the kernel...

Linux Kernel Security Vulnerabilities

The Linux kernel version 4.18 contains a security vulnerability. This vulnerability stems from the s390/cio subsystem, where the ccwdevicegetutilstr function does not check the return value of chpidtochp, which may lead to null pointer dereferencing...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.11 contains security vulnerabilities. These vulnerabilities arise from the independent channel allocation path not including the maximum Tx queue size. As a result, 128 vectors are recorded, but only 64 are allocated. When resource settings are made, NULL entries are...

Linux Kernel Security Vulnerabilities

The Linux kernel version 7.0 contains a security vulnerability. This vulnerability stems from the fact that the datcondsetstoragekey function in KVM s390 does not check the NULL oldkey passed by the caller. As a result, when the pagecondsetstoragekey function is called, a null pointer dereferenci...

Linux Kernel Security Vulnerabilities

The Linux kernel versions 5.10.266 to 5.11, 5.15.217 to 5.16, and 7.2 contain security vulnerabilities. These vulnerabilities stem from a race condition between the tbremovework and tbdomainremove functions in the Thunderbolt driver. The tbfreeunpluggedxdomains function is called without checking...

Linux Kernel Security Vulnerabilities

The Linux kernel version 4.16 contains a security vulnerability. This vulnerability arises from the max30102 interrupt handler referencing an empty activescanmask when a buffer is not enabled, which may lead to null pointer dereferencing...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.18 contains a security vulnerability. This vulnerability arises from passing NULL as a register address during register registration for the divided clock. The Common Clock Framework calls clkdividerrecalcrate, which dereferences that address via readl. As a result, the...

cups: Fix of 2 CVEs

CVE-2026-107885: fix denial of service by not letting an in-flight Send-Document suppress submission timeouts of unrelated held jobs beyond MultipleOperationTimeout - CVE-2026-107890: fix cupsd NULL pointer dereference caused by repeated IPP group tags in job creation requests...

cve-2026-86547-mrubyc-op-enter

CVE-2026-86547 — mrubyc OPENTER NULL Pointer Dereference Standalone proof of concept for CVE-2026-86547 , a NULL pointer dereference in mrubyc's openter handler through release 4.0.0. Summary mrubyc is a lightweight Ruby implementation for embedded systems. Its bytecode VM keeps the current...

Linux Distros Unpatched Vulnerability : CVE-2026-57486

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - pupnp is an SDK for development of UPnP device and control point applications. Prior to 2.0.2, ixmlNodecompare in ixml/src/node.c passes the nullable nodeValue,...

Important: kernel

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: netfilter: nfnatsip: rewind offset when NAT shrinks the packet CVE-2026-100070 In the Linux kernel, the following vulnerability has been resolved: RDMA/srpt: Fix srptallocrwctxs unwind counters CVE-2026-100075 In...

d-os-descriptor

d-os-descriptor Summary The USB Gadget Subsystem includes security issues in the OS descriptor handling section of compositesetup function composite.c. Processing of properly crafted control transfer request messages result in device crash due to null pointer dereference or memory corruption...