Astra Linux – vulnerability in linux-5.10, linux-6.1, linux-5.15

In the Linux kernel, the following vulnerability has been resolved: vcscreen: fix null-ptr-deref in vcsnotifier during concurrent vcswrite A KASAN null-ptr-deref was observed in vcsnotifier: BUG: KASAN: null-ptr-deref in vcsnotifier+0x98/0x130 Read of size 2 at addr qmpcmdname: qmpcapabilities,...

Astra Linux – vulnerability in linux-5.15

In the Linux kernel, the following vulnerability has been resolved: iio: accel: mma8452: use the correct logic to get mma8452data The original logic for getting mma8452data is incorrect; the dev pointer points to a device belonging to iiodev. We cannot use this dev to determine the correct...

Astra Linux – vulnerability in linux, linux-5.10

In the Linux kernel, the following vulnerability has been resolved: hwmon: w83792d Fix NULL pointer dereference by removing unnecessary structure field If the driver reads val value sufficient for val & 0x08 && !val & 0x80 && val & 0x7 == val 4 & 0x7 from the device, then a NULL pointer dereferen...

Astra Linux – vulnerability in netcdf

An issue was found in libezxml.a within ezXML 0.8.6. The ezxmlinternaldtd function, when parsing a specially crafted XML file, performs improper memory handling. This results in a NULL pointer dereference when strcmp is executed on a NULL pointer...

Astra Linux – vulnerability in linux-5.10, linux-6.1, linux-5.15

In the Linux kernel, the following vulnerability has been resolved: spi: spi-fsl-lpspi: fix teardown order issue UAF There is a teardown order issue in the driver. The SPI controller is registered using devmspiregistercontroller, which delays unregistration of the SPI controller until after the...

Astra Linux – vulnerability in linux-5.15

In the Linux kernel, the following vulnerability has been resolved: drm/v3d: Fix null pointer dereference of pointer perfmon In the unlikely event that pointer perfmon is null, the WARNON return path occurs after the pointer has already been dereferenced. This issue is fixed by dereferencing...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: iommu/omap: Fixed a regression in the probe for NULL pointer dereferencing. The commit 3f6634d997db “iommu: Use the correct method to retrieve iommuops” started causing a NULL pointer dereference for some omap variants:...

Astra Linux – Vulnerability found in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: Net: tap: A NULL pointer dereference occurred in devparseheaderprotocol when skb-dev is null. This bug is triggered by the tap driver. When tapgetuser calls virtionethdrtoskb, skb-dev is null since skb-dev is set after the call t...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: btrfs: corrected the order of the prelimref arguments in btrfsprelimref The btrfsprelimref function calls the old and new reference variables in the incorrect order. This causes a NULL pointer dereference because oldref is...

openssl: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing

A flaw was found in OpenSSL. A remote attacker could exploit this vulnerability by sending a specially crafted Cryptographic Message Syntax CMS EnvelopedData message. During the processing of a KeyTransportRecipientInfo with RSA-OAEP encryption, the system attempts to access an optional parameter...

SUSE CVE-2026-98404

In the Linux kernel, the following vulnerability has been resolved: drm/virtio: Fix a NULL vs ERRPTR bug in virtiogpuuserframebuffercreate Smatch complains that returning a NULL here will lead to a NULL pointer dereference in drmmodeaddfb2. Return an error pointer instead...

SUSE CVE-2026-98411

In the Linux kernel, the following vulnerability has been resolved: power: sequencing: fix NULL-pointer dereference in pwrseqdeviceregister If devsetname fails in pwrseqdeviceregister, we jump to the errputpwrseq label before initializing pwrseq-targets. pwrseqrelease will try to iterate over...

SUSE CVE-2026-98412

In the Linux kernel, the following vulnerability has been resolved: power: sequencing: fix NULL-pointer dereference in pwrsequnitnew If memory allocation fails in pwrsequnitsetupdeps, pwrsequnitput is called to release the partially initialized unit. However, we've never initialized unit-list and...

SUSE CVE-2026-109252

FreeRDP from 3.9.0 before 3.32.0 contains a NULL pointer dereference vulnerability in the RDPEAR NDR reader that allows malicious servers to crash clients via truncated KERBRPCINTERNALNAME data. Attackers can send a CreateApReqAuthenticatorReq with NameCount of two or more ending before the Names...

CLSA-2026-1792072796 cups: Fix of 2 CVEs

CVE-2026-107890: scheduler: NULL pointer dereference on repeated IPP group tags - CVE-2026-107885: scheduler: incomplete jobs could be held open indefinitely, exhausting MaxJobs...

CLSA-2026-1792072476 cups: Fix of 2 CVEs

CVE-2026-107890: scheduler: NULL pointer dereference on repeated IPP group tags - CVE-2026-107885: scheduler: incomplete jobs could be held open indefinitely, exhausting MaxJobs...

CLSA-2026-1792071609 cups: Fix of 2 CVEs

CVE-2026-107890: scheduler: NULL pointer dereference on repeated IPP group tags - CVE-2026-107885: scheduler: incomplete jobs could be held open indefinitely, exhausting MaxJobs...

CVE-2026-79836

A vulnerability HPE NonStop SQL/MX Run-Time Statistics may allow an attacker to cause memory corruption and null pointer dereference, potentially leading to process crash, DoS or information disclosure...

CVE-2026-79836

The HPE NonStop SQL/MX Run-Time Statistics component is vulnerable to memory corruption and a null pointer dereference. This flaw may allow an attacker to cause a process crash , Denial of Service (DoS) , or information disclosure . Affected versions include SQL/MX Run-Time Statistics T1117 - T11...

CVE-2026-79836 HPE NonStop SQL/MX Run-Time Statistics - Information disclosure and DoS vulnerability

A vulnerability HPE NonStop SQL/MX Run-Time Statistics may allow an attacker to cause memory corruption and null pointer dereference, potentially leading to process crash, DoS or information disclosure...