CVE-2026-97989

A flaw was found in the Linux kernel's vDPA Device in Userspace VDUSE subsystem. The driver does not properly validate virtqueue alignment parameters during device configuration, allowing invalid or zero alignment values to pass into internal queue creation routines. A local user could exploit th...

CVE-2026-92871

A NULL pointer dereference vulnerability exists in Pgpool-II, which may allow an unauthenticated attacker to cause abnormal termination of the watchdog process...

EUVD-2026-89675

A NULL pointer dereference vulnerability exists in Pgpool-II, which may allow an unauthenticated attacker to cause abnormal termination of the watchdog process...

CVE-2026-92871

A NULL pointer dereference vulnerability exists in Pgpool-II . This flaw may allow an unauthenticated attacker to trigger an abnormal termination of the watchdog process . No specific affected versions, root cause files, or remediation details are provided in the documents. Exploitation details a...

CVE-2026-97975

A flaw was found in the Linux kernel's Bluetooth subsystem. A race condition occurs when child network devices are unregistered concurrently while Bluetooth connection cleanup routines reparent child devices. A local user can exploit this timing issue to trigger a NULL pointer dereference,...

CVE-2026-86134

A NULL pointer dereference vulnerability exists in the WatchGuard Fireware OS authentication process. This flaw allows a remote, unauthenticated attacker to crash the management daemon by sending a specially crafted request to the login interface , resulting in a denial of service (DoS). No speci...

EUVD-2026-89605

A NULL pointer dereference vulnerability in the WatchGuard Fireware OS authentication process allows a remote, unauthenticated attacker to crash the management daemon by sending a specially request to the login interface, resulting in a denial of service...

ioctlance

IOCTLance Description Presented at CODE BLUE 2023, this project titled Enhanced Vulnerability Hunting in WDM Drivers with Symbolic Execution and Taint Analysis introduces IOCTLance, a tool that enhances its capacity to detect various vulnerability types in Windows Driver Model WDM drivers. In a...

CVE-2023-3338-DECPwn

DECPwn Practicing different Linux kernel exploitation techniques with my DECnet vulnerability and null page mapping enabled. Scenarios Everything disabled : qemu-system-x8664 -append "nosmap nosmep nopti nokaslr" Code execution is redirected to the output function in userland, which invokes...

CVE-2026-86128

A NULL pointer dereference vulnerability exists in the Fireware OS NetFlow packet-processing feature. This flaw allows a remote, unauthenticated attacker to trigger a denial of service (DoS) by sending a specially crafted IPv6 packet . No specific affected versions, remediation steps, or exploita...

CVE-2026-97947

A flaw was found in the Linux kernel's x86 AMD node component, which may lead to a Denial of Service DoS. If initialization of the AMD System Management Network SMN interface fails, exported read and write functions remain accessible without validating that internal device structures were...

CVE-2026-97927

A flaw was found in the Linux kernel's Unix File System UFS implementation. This vulnerability allows a local user to cause a Denial of Service DoS by mounting a specially crafted or corrupted file system image. During a failed mount operation, an improper cleanup sequence leads to a null pointer...

CVE-2026-97484

A flaw was found in the Linux kernel's USB/IP USB over Internet Protocol Virtual Host Controller Interface VHCI driver. A local user can cause a Denial of Service DoS by reading device status information through sysfs when a host controller fails to initialize. Because the driver does not properl...

CVE-2026-97480

A flaw was found in the Linux kernel's 8250 serial driver. During serial port registration for devices lacking an associated parent device, the driver attempts to access device properties without verifying that the device pointer is valid. This condition leads to a NULL pointer dereference, which...

CVE-2026-97482

A flaw was found in the Linux kernel's gokuudc USB gadget driver. An attacker or event triggering a USB reset interrupt before a gadget driver is bound, or after one is unbound, causes the interrupt handler to access an uninitialized driver pointer while logging the event. This flaw results in a...

CVE-2026-102723

NULL Pointer Dereference on MSRP Attribute Table Exhaustion...

CVE-2026-102724

NULL Pointer Dereference When Evicting the Sole MSRP Attribute...

CVE-2026-102724

NULL Pointer Dereference When Evicting the Sole MSRP Attribute...

EUVD-2026-89190

NULL Pointer Dereference When Evicting the Sole MSRP Attribute...

CVE-2026-102724

The Eclipse ThreadX networking stack NetX Duo is affected by a NULL Pointer Dereference vulnerability. The issue occurs specifically when the system attempts to evict the sole MSRP attribute . This flaw can lead to a High Availability impact, as indicated by the CVSS 4.0 metrics. While the vulner...