Astra Linux – vulnerability in linux-6.1, linux-6.12, linux-6.18

In the Linux kernel, the following vulnerability has been resolved: net: fddi: skfp: fix NULL deref when setting the MAC address while down skfpctlsetmacaddress calls ResetAdapter unconditionally, without checking netifrunning. ResetAdapter first calls cardstop, which sets smc-hw.hwstate to...

Astra Linux – vulnerability in linux-6.12

In the Linux kernel, the following vulnerability has been resolved: drm/mediatek: dsi: Store driver data before invoking mipidsihostregister The call to mipidsihostregister triggers a callback to mtkdsibind, which uses devgetdrvdata to retrieve the mtkdsi struct; therefore, this structure must be...

Astra Linux – vulnerability in linux-6.18

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7996: Fix possible NULL pointer dereference in mt7996macwritetxwi80211 For injected frames e.g., via Radiotap, mac80211 can pass info-control.vif = NULL, as explicitly noted in struct ieee80211txinfo. Check the vif...

Astra Linux – vulnerability in linux-6.1, linux-6.12, linux-6.18

In the Linux kernel, the following vulnerability has been resolved: ipv6: ndisc: fix NULL deref in acceptuntrackedna acceptuntrackedna re-fetches the inet6dev using in6devgetdev, and dereferences idev-cnf.acceptuntrackedna without performing a NULL check, even though its sole caller, ndiscrecvna,...

Astra Linux – vulnerability in linux-6.1, linux-6.12, linux-6.18

In the Linux kernel, the following vulnerability has been resolved: hwmon: lm90 Only report alarms if the driver is ready Userspace can read sysfs attributes before driver registration is complete, immediately after devmhwmondeviceregisterwithinfo has been called. At that time, data-hwmondev is n...

Astra Linux – vulnerability in linux-6.1, linux-6.12

In the Linux kernel, the following vulnerability has been resolved: NFSv4/flexfiles: reject zero filehandle version count fflayoutalloclseg decodes the filehandle-version array count from the flexfiles layout body. This value is used as the count for kzallocobjs; currently, the code only rejects...

Astra Linux – vulnerability in linux-6.1, linux-6.12, linux-6.18

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: gokuudc: avoid NULL deref of dev-driver in INTUSBRESET log gokuirq handles multiple bus events under a single ep0 path. It already guards the gadget driver suspend/resume callbacks against a NULL -driver: if...

Astra Linux – vulnerability in linux-6.1, linux-6.12, linux-6.18

In the Linux kernel, the following vulnerability has been resolved: riscv: Prevent NULL pointer dereference in machinekexecprepare A NULL pointer dereference issue is found in riscv’s machinekexecprepare, where image-segmenti.buf may be NULL and is copied without any checks. The NULL buf originat...

Astra Linux – vulnerability in linux-6.12, linux-6.18

In the Linux kernel, the following vulnerability has been resolved: platform/x86: intel-hid: Protect ACPI notify handler against recursion Since commit e2ffcda16290 “ACPI: OSL: Allow Notify handlers to run on all CPUs”, ACPI notify handlers such as intel-hid notifyhandler may run on multiple CPU...

Astra Linux – vulnerability in linux-6.18

In the Linux kernel, the following vulnerability has been resolved: ALSA: FCP: Fix NULL pointer dereference in interface lookup A malformed USB device can provide a vendor-specific interface without any endpoint descriptors. Currently, fcpfindfcinterface selects the first vendor-specific interfac...

Astra Linux – vulnerability in linux-6.12

In the Linux kernel, the following vulnerability has been resolved: wifi: rtw89: pci: validate sequence number of TX release report Hardware rarely reports an abnormal sequence number in the TX release report; this can lead to accessing out-of-bounds elements of the wdring-pages array, resulting ...

Astra Linux – vulnerability in linux-6.12, linux-6.18

In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: avoid destroyworkqueueNULL on vkms init failure Two paths through vmwvkmsinit can leave vmw-crcworkq NULL while still leaving the rest of the driver in a state that calls vmwvkmscleanup at module unload: 1...

CVE-2026-99257

A flaw was found in the Linux kernel's General Purpose Input/Output GPIO subsystem. This vulnerability allows a local user to cause a Denial of Service DoS by crashing the operating system. The issue occurs during shared GPIO lookups using firmware nodes without an associated device, resulting in...

CVE-2022-34683

CVE-2022-34683 NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer nvlddmkm.sys handler for DxgkDdiEscape, where a null-pointer dereference occurs, which may lead to denial of service. authentication| complexity| vector ---|---|--- not available| not available|...

PT-2026-138392

Name of the Vulnerable Software and Affected Versions Babelfish for PostgreSQL versions 1.0 through 1.5 Babelfish for PostgreSQL versions 2.1 through 2.15 Babelfish for PostgreSQL versions 3.1 through 3.12 Babelfish for PostgreSQL versions 4.0 through 4.8 Babelfish for PostgreSQL versions 5.1...

Elastic Beats packetbeat 8.0.x < 8.19.24 / 9.0.x < 9.4.9 / 9.5.x < 9.5.6 DoS (ESA-2026-208)

The version of Elastic Beats packetbeat installed on the remote host is 8.0.x prior to 8.19.24, 9.0.x prior to 9.4.9, or 9.5.x prior to 9.5.6. It is, therefore, affected by a denial of service vulnerability. - NULL Pointer Dereference CWE-476 in the AMQP protocol parser in Packetbeat can lead to ...

CVE-2026-87045: zephyrproject zephyr: The HTTP/2 server in subsys/net/lib/http/http_server_http2.c clears the connection's stream binding at the start of…

The HTTP/2 server in subsys/net/lib/http/httpserverhttp2.c clears the connection's stream binding at the start of every frame. handlehttpframeheader executed client-currentstream = NULL unconditionally, but a CONTINUATION frame does not open a new stream and enterhttpframecontinuationstate never...

pillow: Pillow: Denial of Service via null pointer dereference in Image.merge()

A flaw was found in Pillow. A remote attacker can cause a Denial of Service DoS by supplying a specially crafted image file to an application that processes images with the library. This issue occurs because the Image.merge function fails to properly validate the first input band, allowing...

pillow: Pillow: Denial of Service via null pointer dereference in Image.merge()

A flaw was found in Pillow. A remote attacker can cause a Denial of Service DoS by supplying a specially crafted image file to an application that processes images with the library. This issue occurs because the Image.merge function fails to properly validate the first input band, allowing...

pillow: Pillow: Denial of Service via null pointer dereference in Image.merge()

A flaw was found in Pillow. A remote attacker can cause a Denial of Service DoS by supplying a specially crafted image file to an application that processes images with the library. This issue occurs because the Image.merge function fails to properly validate the first input band, allowing...