SUSE-SU-2026:4120-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP7 RT kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2024-57841: net: fix memory leak in tcpconnrequest bsc1235944. - CVE-2025-68214: timers: Fix NULL function pointer race in timershutdownsync bsc1255225. -...

httpd: mod_authn_socache: NULL pointer dereference can cause a child process crash

A flaw was found in the modauthnsocache module of httpd. This vulnerability allows an unauthenticated remote user to crash a child process due to a NULL pointer dereference when the server is operating in a caching forward proxy configuration...

httpd: NULL pointer dereference via specially crafted request

A flaw was found in the moddavlock module of httpd. This vulnerability allows a remote unauthenticated attacker to crash the server due to a NULL pointer dereference via a specially crafted request...

FreeRDP: FreeRDP: Denial of Service via crafted smartcard cache requests

A flaw was found in FreeRDP. When smartcard emulation is enabled, a remote attacker can send specially crafted smartcard cache requests to a FreeRDP client. This can lead to a null pointer dereference, causing the client process to terminate and disrupting active remote desktop sessions...

FreeRDP: FreeRDP: Denial of Service via crafted smartcard cache requests

A flaw was found in FreeRDP. When smartcard emulation is enabled, a remote attacker can send specially crafted smartcard cache requests to a FreeRDP client. This can lead to a null pointer dereference, causing the client process to terminate and disrupting active remote desktop sessions...

SUSE CVE-2026-78126

strongSwan 4.1.10 through 6.0.7 allows a NULL pointer dereference in the eap-aka plugin...

SUSE CVE-2026-78130

strongSwan 4.2.0 through 6.0.7 has a NULL pointer dereference in the x509 plugin's attribute certificate parser...

SUSE CVE-2026-80917

In the Linux kernel, the following vulnerability has been resolved: PCI: host-generic: Fix NULL pointer dereference on 32-bit CAM systems On 32-bit systems the config space is too large to ioremap in one go, so pciecamcreate maps each bus segment separately and relies on the -addbus callback...

ROS-20260910-73-0165

The vulnerability of the compositormpeg4getSensorHandlerEx function in the MP4Box utility of the GPAC multimedia platform, which relates to the issue of using a null pointer during processing of incorrect XMT scenes, allows a malicious actor to cause service failure...

ROS-20260910-73-1142

The vulnerability of the composerlayoutmodified function in the MP4Box utility of the GPAC multimedia platform, which relates to the issue of handling incorrect XMT scenes by resetting the null pointer, allows a malicious actor to trigger a service failure...

ROS-20260910-73-0164

The vulnerability of the envtestevaluate function in the MP4Box utility of the GPAC multimedia platform, which relates to the assignment of a null pointer during processing of an incorrect XMT scene, allows a malicious actor to trigger a service failure...

PT-2026-89615

Name of the Vulnerable Software and Affected Versions mruby version 4.0.0 Description A NULL pointer dereference occurs in the Prism parser component. An attacker can use a specially crafted Ruby source file to cause the parser to pass a NULL pointer to nonnull string handling functions, leading ...

ROS-20260910-73-0128

The vulnerability of the InputSensorRegister function in the MP4Box utility of the GPAC multimedia platform, which involves swapping the zero pointer during processing of an incorrect XMT scene, allows a intruder to trigger a service failure...

CVE-2026-79590: NULL Pointer Dereference

A NULL pointer dereference vulnerability exists in the Prism parser component of mruby 4.0.0. An attacker can provide a specially crafted Ruby source file that triggers the parser to pass a NULL pointer to nonnull string handling functions, resulting in undefined behavior and application crash...

CVE-2026-79590

A NULL pointer dereference vulnerability exists in the Prism parser component of mruby 4.0.0. An attacker can provide a specially crafted Ruby source file that triggers the parser to pass a NULL pointer to nonnull string handling functions, resulting in undefined behavior and application crash...

CVE-2026-79590

A NULL pointer dereference vulnerability exists in the Prism parser component of mruby 4.0.0. An attacker can provide a specially crafted Ruby source file that triggers the parser to pass a NULL pointer to nonnull string handling functions, resulting in undefined behavior and application crash...

CVE-2026-79590

A NULL pointer dereference vulnerability exists in the Prism parser component of mruby 4.0.0 . An attacker can provide a specially crafted Ruby source file that triggers the parser to pass a NULL pointer to nonnull string handling functions, leading to undefined behavior and an application crash ...

CVE-2026-79590

A NULL pointer dereference vulnerability exists in the Prism parser component of mruby 4.0.0. An attacker can provide a specially crafted Ruby source file that triggers the parser to pass a NULL pointer to nonnull string handling functions, resulting in undefined behavior and application crash...

Linux Distros Unpatched Vulnerability : CVE-2026-80917

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - PCI: host-generic: Fix NULL pointer dereference on 32-bit CAM systems On 32-bit systems the config space is too large to ioremap in one go, so pciecamcreate map...

PT-2026-89520

Name of the Vulnerable Software and Affected Versions Tesseract versions prior to 5.5.4 Description A flaw exists in the Plumbing::DeSerialize function within src/lstm/plumbing.cpp that allows a crafted .traineddata model to contain a zero-length stack for NT SERIES, NT PARALLEL, or NT REVERSED...