PT-2026-84941

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ASoC xilinx formatter pcm component where interrupt handlers use dev get drvdata to retrieve driver data. Because the driver data is only assigned at the end of th...

PT-2026-84950

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference occurs in the psxpad-spi driver. The function psxpad spi suspend attempts to retrieve the controller state using spi get drvdata, but because the probe process...

CVE-2026-80752: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: Input: psxpad-spi - set driver data before use psxpadspisuspend retrieves the controller state with spigetdrvdata, but probe never stores it, so suspend dereferences a NULL pointer. Store it during probe...

PT-2026-90892

In the Linux kernel, the following vulnerability has been resolved: Input: psxpad-spi - set driver data before use psxpad spi suspend retrieves the controller state with spi get drvdata, but probe never stores it, so suspend dereferences a NULL pointer. Store it during probe...

PT-2026-84981

Name of the Vulnerable Software and Affected Versions GStreamer affected versions not specified Description A NULL pointer dereference flaw exists in the RTSP support library. The issue occurs during the parsing of Authorization or WWW-Authenticate headers using Digest authentication within the g...

PT-2026-90902

A NULL pointer dereference flaw was found in GStreamer's RTSP support library. The vulnerability occurs while parsing an Authorization or WWW-Authenticate header that uses Digest authentication. Specially crafted whitespace placement around a parameter's terminator can cause an internal length...

CVE-2026-85150: NULL Pointer Dereference

A NULL pointer dereference flaw was found in GStreamer's RTSP support library. The vulnerability occurs while parsing an Authorization or WWW-Authenticate header that uses Digest authentication. Specially crafted whitespace placement around a parameter's terminator can cause an internal length...

Unity Linux 20.1050e / 20.1070e Security Update: kernel (UTSA-2026-105547)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-105547 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: target: Fix WRITESAME No Data Buffer crash In newer version of the SBC specs, we have a NDO...

Unity Linux 20.1070-8ae / 20.1070e Security Update: kernel (UTSA-2026-105425)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-105425 advisory. In the Linux kernel, the following vulnerability has been resolved: cxl: fix possible null-ptr-deref in cxlguestinitafu|adapter If deviceregister fails in...

CVE-2026-85150: NULL Pointer Dereference

A NULL pointer dereference flaw was found in GStreamer's RTSP support library. The vulnerability occurs while parsing an Authorization or WWW-Authenticate header that uses Digest authentication. Specially crafted whitespace placement around a parameter's terminator can cause an internal length...

CVE-2026-80730: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Fix crash passing ERRPTR to kthreadstop In testringbuffer's outfree cleanup loop, the check !rbthreadscpu only catches NULL entries and misses entries that hold an ERRPTR. rbthreads is static, so unassigned slots are...

PT-2026-84928

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A crash occurs in the ring-buffer component during the late initcall self-test. In the test ringbuffer function's out free cleanup loop, the check !rb threadscpu only identifies NULL...

openssl: NULL pointer dereference in QUIC server initial packet handling

A flaw was found in the OpenSSL QUIC Quick UDP Internet Connections server. A remote attacker could send a specially crafted QUIC initial packet with an invalid token. If the server's address validation is explicitly disabled, this could lead to a NULL pointer dereference, causing the server...

openssl: NULL Pointer Dereference in CRMF EncryptedValue Decryption

A flaw was found in OpenSSL. An attacker controlling a Certificate Management Protocol CMP server, or acting as a man-in-the-middle, could craft a malicious CMP response. This response, containing a Certificate Request Message Format CRMF CertRepMessage with a specific malformed EncryptedValue...

Updated libarchive packages fix security vulnerabilities

Double-free vulnerability in rar5 decompression logic via dangling filteredbuf pointer in initunpack. CVE-2026-14164 Heap overflow oob read while parsing a tar archive contains a pax extended header. CVE-2026-15028 A null pointer dereference vulnerability exists in the acl parser of libarchive...

MGASA-2026-0366 Updated libarchive packages fix security vulnerabilities

Double-free vulnerability in rar5 decompression logic via dangling filteredbuf pointer in initunpack. CVE-2026-14164 Heap overflow oob read while parsing a tar archive contains a pax extended header. CVE-2026-15028 A null pointer dereference vulnerability exists in the acl parser of libarchive...

K000163148: Linux kernel vulnerability CVE-2026-63810

Security Advisory Description In the Linux kernel, the following vulnerability has been resolved: block: Avoid mounting the bdev pseudo-filesystem in userspace The bdev pseudo-filesystem is an internal kernel filesystem with which userspace should not interfere. Unregister it so that userspace...

K000162603: NGINX ngx_http_js_module vulnerability CVE-2026-78222

Security Advisory Description A vulnerability exists in NGINX JavaScript where a malformed HTTP response received by ngx.fetch can cause an NGINX worker to terminate unexpectedly when trusted JavaScript reads Response.statusText. Exploitation requires control or influence over the fetched HTTP...

SUSE CVE-2026-72432

In the Linux kernel, the following vulnerability has been resolved: tpmcrb: Check ACPICOMPANION against NULL during probe Every platform driver can be forced to match a device that doesn't match its list of device IDs because of devicematchdriveroverride, so platform drivers that rely on the...

FreeRDP: FreeRDP: Denial of Service via crafted smartcard cache requests

A flaw was found in FreeRDP. When smartcard emulation is enabled, a remote attacker can send specially crafted smartcard cache requests to a FreeRDP client. This can lead to a null pointer dereference, causing the client process to terminate and disrupting active remote desktop sessions...