CVE-2026-16182 IBM DataPower Gateway NULL Pointer Dereference

IBM DataPower Gateway 10.5.0.0 through 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow an attacker to cause a denial of service due to a NULL pointer dereference in GraphQL variable processing...

EUVD-2026-94956

IBM DataPower Gateway 10.5.0.0 through 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow an attacker to cause a denial of service due to a NULL pointer dereference in GraphQL variable processing...

CVE-2026-16182

The IBM DataPower Gateway is vulnerable to a denial of service (DoS) due to a NULL pointer dereference occurring during GraphQL variable processing . This issue affects the following versions: 10.5.0.0 through 10.5.0.22 , 10.6.1 through 10.6.6 , 10.6.0.0 through 10.6.0.10 , and 11.0.0.0 through 1...

CVE-2026-98174

A flaw was found in the Linux kernel's SMB client subsystem. Missing list initialization and a race condition during connection reconnect operations can lead to a null-pointer dereference or list corruption. This flaw allows reconnection events, such as during network instability or server...

[SECURITY] [DLA 4828-1] gst-plugins-base1.0 security update

Debian LTS Advisory DLA-4828-1 [email protected] https://www.debian.org/lts/security/ Andreans Henriksson October 08, 2026 https://wiki.debian.org/LTS Package : gst-plugins-base1.0 Version : 1.22.0-3+deb12u7 CVE ID : CVE-2026-18297 CVE-2026-85150 Multiple vulnerabilities has been...

kernel: ipv6: add NULL checks for idev in SRv6 paths

A flaw was found in the Linux kernel. Missing null pointer checks in the IPv6 Segment Routing SRv6 implementation, specifically within the seg6hmacvalidateskb and ipv6srhrcv functions, can occur when an IPv6 device lacks proper configuration. This oversight may allow an attacker to trigger a null...

FreeRDP: FreeRDP: Denial of Service via crafted Surface Bits command

A flaw was found in FreeRDP. A malicious Remote Desktop Protocol RDP server can trigger a null pointer dereference in the gdisurfacebits function by sending a specially crafted Surface Bits command that claims to use the NSCodec codec ID. This vulnerability exists even when the NSCodec is disable...

kernel: fs/notify: call exportfs_encode_fid with s_umount

A flaw was found in the Linux kernel’s filesystem notification fs/notify code where calling inotifyshowfdinfo on a file descriptor watching an overlayfs inode during an unmount operation could lead to a NULL pointer dereference...

SUSE-SU-2026:24199-1 Security update for strongswan

This update for strongswan fixes the following issues: - CVE-2026-78123: Undefined Memory Access When Handling PKCS7 Containers bsc1276533. - CVE-2026-78124: Memory Leak When Processing Certificates in PKCS7 Containers bsc1276534. - CVE-2026-78126: NULL-Pointer Dereference When Handling...

OPENSUSE-SU-2026:22050-1 Security update for strongswan

This update for strongswan fixes the following issues: - CVE-2026-78123: Undefined Memory Access When Handling PKCS7 Containers bsc1276533. - CVE-2026-78124: Memory Leak When Processing Certificates in PKCS7 Containers bsc1276534. - CVE-2026-78126: NULL-Pointer Dereference When Handling...

PT-2026-107939

Name of the Vulnerable Software and Affected Versions IBM DataPower Gateway versions 10.5.0.0 through 10.5.0.22 IBM DataPower Gateway versions 10.6.0.0 through 10.6.0.10 IBM DataPower Gateway versions 10.6.1 through 10.6.6 IBM DataPower Gateway versions 11.0.0.0 through 11.0.0.2 Description A NUL...

PT-2026-108200

Name of the Vulnerable Software and Affected Versions MIT krb5 versions prior to 1.22.3 Description A NULL pointer dereference occurs in the KDC's get pac princ with realm function when it processes malformed names, returning success while leaving the client principal as NULL. A malicious or...

PT-2026-107967

Name of the Vulnerable Software and Affected Versions IBM DataPower Gateway versions 10.5.0.0 through 10.5.0.22 IBM DataPower Gateway versions 10.6.0.0 through 10.6.0.10 IBM DataPower Gateway versions 10.6.1 through 10.6.6 IBM DataPower Gateway versions 11.0.0.0 through 11.0.0.2 Description A...

EulerOS 2.0 SP15 : libusbx (EulerOS-SA-2026-3923)

According to the versions of the libusbx packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : libusb before version 1.0.30 contains a NULL pointer dereference vulnerability that allows attackers to crash applications by supplying a malform...

EulerOS 2.0 SP15 : patch (EulerOS-SA-2026-3932)

According to the versions of the patch packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : GNU patch is vulnerable to a NULL pointer dereference when processing a specially crafted unified-diff patch file. Improper handling of consecutive...

Linux Distros Unpatched Vulnerability : CVE-2026-98243

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: dma-buf/dma-fence: fix checking signaling bit for timeline and driver name v3 The patch...

PT-2026-108201

Name of the Vulnerable Software and Affected Versions MIT Kerberos 5 krb5 versions prior to 1.22.3 Description A NULL pointer dereference occurs in the make cred list function within rd cred.c. Authenticated Kerberos clients can trigger this by sending mismatched KRB-CRED arrays. Specifically, an...

Linux Distros Unpatched Vulnerability : CVE-2026-98220

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: schedext: Fix NULL sched deref in kfunc sub-sched error paths When the root scheduler has...

CVE-2026-107708: NULL Pointer Dereference

MIT krb5 through 1.22.2 contains a NULL pointer dereference vulnerability in the KDC's getpacprincwithrealm that returns success while leaving the client principal NULL on malformed names. A malicious or compromised cross-realm trusted KDC can send an S4U2Proxy request with a PAC carrying a...

CVE-2026-107778: NULL Pointer Dereference

MIT Kerberos 5 krb5 through 1.22.2 contains a NULL pointer dereference in makecredlist in rdcred.c that allows authenticated Kerberos clients to crash services by sending mismatched KRB-CRED arrays. Attackers can send forwarded credentials with more tickets than ticketinfo entries through...