SUSE CVE-2026-64187

In the Linux kernel, the following vulnerability has been resolved: xfs: fail recovery on a committed log item with no regions If the first op of a transaction is a bare transaction header len == sizeofstruct xfstransheader, xlogrecoveraddtotrans adds an item but no region, leaving it on ritemq...

SUSE CVE-2026-64207

In the Linux kernel, the following vulnerability has been resolved: net/sched: dualpi2: fix GSO backlog accounting When DualPI2 splits a GSO skb into N segments, it propagates N additional packets to its parent before returning NETXMITSUCCESS. The parent then accounts for the original skb once...

Security update for ffmpeg

This update for ffmpeg fixes the following issue CVE-2025-10256: NULL pointer dereference in Firequalizer filter bsc1249431. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can run the comman...

SUSE-SU-2026:3149-1 Security update for ffmpeg

This update for ffmpeg fixes the following issue - CVE-2025-10256: NULL pointer dereference in Firequalizer filter bsc1249431...

CVE-2026-63973

A flaw was found in the Linux kernel's mana network driver. During certain error handling scenarios, specifically when network queue allocation fails, the driver attempts to access memory that has already been freed. This can lead to a NULL pointer dereference, causing the system to crash and...

CVE-2026-64207

A flaw was found in the Linux kernel's DualPI2 Dual-rate PI2 queue discipline. This vulnerability arises from incorrect accounting of Generic Segmentation Offload GSO backlog, where the parent queue such as QFQ - Hierarchical Fair Queueing miscalculates the number of queued packets. This...

CVE-2026-64187

A flaw was found in the Linux kernel's XFS filesystem log recovery component. A local attacker could exploit this vulnerability by crafting a malicious XFS log. When the system attempts to recover from this log, it triggers a null-pointer dereference, which can lead to a system crash. This result...

CVE-2026-53385

A flaw was found in the Linux kernel's vcscreen module. A race condition in the vcswrite function can lead to a null pointer dereference. This occurs when the vcdata pointer becomes stale during concurrent write operations, and a subsequent call attempts to use the now-invalid pointer. A local...

ALSA-2026:42828 Important: httpd:2.4 security, bug fix, and enhancement update

The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server. Security Fixes: httpd: incomplete fix for CVE-2023-38709 CVE-2024-42516 httpd: NULL pointer dereference via specially crafted request CVE-2026-29169 httpd: Apache HTTP Server: Heap-based Buffer...

EulerOS Virtualization 2.10.0 : httpd (EulerOS-SA-2026-2853)

According to the versions of the httpd packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Allocation of Resources Without Limits or Throttling vulnerability in Apache HTTP Server's modmd via OCSP response data.CVE-2026-291...

CVE-2026-64190

In the Linux kernel, the following vulnerability has been resolved: net: team: fix NULL pointer dereference in teamxmit during mode change teamchangemode clears team-ops with memset before restoring safe dummy handlers via teamadjustops. A concurrent teamxmit running under RCU on another CPU can...

CVE-2026-47275

In nanomq versions 0.24.11 and earlier, a NULL pointer dereference in nnimqttv5msgdecodeconnect allows a malicious MQTT broker to crash any connecting NanoMQ MQTTv5 client including bridge mode with a single packet, causing remote denial of service via SIGSEGV. In nnimqttv5msgdecodeconnect...

CVE-2026-47275 nanomq NULL Pointer Dereference in MQTTv5 Client CONNECT Decoder Leading to Remote DoS

In nanomq versions 0.24.11 and earlier, a NULL pointer dereference in nnimqttv5msgdecodeconnect allows a malicious MQTT broker to crash any connecting NanoMQ MQTTv5 client including bridge mode with a single packet, causing remote denial of service via SIGSEGV. In nnimqttv5msgdecodeconnect...

CVE-2026-47275

Nanomq has a NULL pointer dereference in nni_mqttv5_msg_decode_connect() (mqtt_codec.c:1863) for versions ≤ 0.24.11. The code iterates CONNECT properties using prop instead of will_prop; when a packet has no connect-level properties but has will properties, dereferencing prop->next can SIGSEGV...

CVE-2026-64190

In the Linux kernel, the following vulnerability has been resolved: net: team: fix NULL pointer dereference in teamxmit during mode change teamchangemode clears team-ops with memset before restoring safe dummy handlers via teamadjustops. A concurrent teamxmit running under RCU on another CPU can...

CVE-2026-64190

Concrete details found: CVE-2026-64190 affects the Linux kernel team driver. The flaw is a race during a mode-change in net: team where __team_change_mode() clears team->ops with memset() while a concurrent team_xmit() on another CPU may read team->ops.transmit and dereference a NULL pointe...

CVE-2026-64190 net: team: fix NULL pointer dereference in team_xmit during mode change

In the Linux kernel, the following vulnerability has been resolved: net: team: fix NULL pointer dereference in teamxmit during mode change teamchangemode clears team-ops with memset before restoring safe dummy handlers via teamadjustops. A concurrent teamxmit running under RCU on another CPU can...

EUVD-2026-46007

In the Linux kernel, the following vulnerability has been resolved: xfs: fail recovery on a committed log item with no regions If the first op of a transaction is a bare transaction header len == sizeofstruct xfstransheader, xlogrecoveraddtotrans adds an item but no region, leaving it on ritemq...

Security update for 389-ds

This update for 389-ds fixes the following issues Update to version 2.7.0git212.9b0755edb. CVE-2026-11610: heap buffer overflow in sasliorecv via padded SASL UNBIND bsc1270695. CVE-2026-11611: content synchronization persistent search plugin can allow unbounded memory growth bsc1267975...

Security Bulletin: IBM InfoSphere Information Server is affected by multiple vulnerabilities in OpenSSL

Summary Multiple vulnerabilities in OpenSSL that is used by IBM InfoSphere Information Server were addressed. Vulnerability Details CVEID:CVE-2026-22796 DESCRIPTION: Issue summary: A type confusion vulnerability exists in the signature verification of signed PKCS7 data where an ASN1TYPE union...