SUSE CVE-2026-72385

In the Linux kernel, the following vulnerability has been resolved: tracing/fprobe: Fix NULL pointer dereference in fprobefgraphentry fprobefgraphentry sizes a shadow-stack reservation in one walk of the per-ip fprobe list and fills it in a second walk, both under rcureadlock only. A fprobe...

SUSE CVE-2026-72403

In the Linux kernel, the following vulnerability has been resolved: ALSA: FCP: Fix NULL pointer dereference in interface lookup A malformed USB device can provide a vendor-specific interface without any endpoint descriptors. fcpfindfcinterface currently selects the first vendor-specific interface...

SUSE CVE-2026-72467

In the Linux kernel, the following vulnerability has been resolved: xprtrdma: Check frwrwpcreate during connect frwrwpcreate creates the singleton Memory Region used to encode padding for Write chunks whose payload length is not XDR-aligned. Its failure paths return a negative errno and leave...

SUSE CVE-2026-72468

In the Linux kernel, the following vulnerability has been resolved: xprtrdma: Initialize reid before removal registration rpcrdmacreateid registers ep-rern with the rpcrdma ibclient before returning the new rdmacmid to rpcrdmaepcreate. However rpcrdmaepcreate currently stores that pointer in...

SUSE CVE-2026-74335

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix NULL pointer dereference in bpftaskfromvpid bpftaskfromvpid looks up a task in the pid namespace of the current task, via findtaskbyvpid: findtaskbyvpidvpid findtaskbypidnsvpid, taskactivepidnscurrent findpidnsnr, ns -...

SUSE CVE-2026-74342

In the Linux kernel, the following vulnerability has been resolved: kernfs: link kn to its parent before the LSM init hook After commit 12e9e3cd03b5 "simpexattr: use per-sb cache", kernfsxattrset and kernfsxattrget compute the cache via kernfsrootkn before any other check. kernfsrootkn walks...

SUSE CVE-2026-74366

In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix NULL deref in changestalinks for unready link ieee80211setactivelinks calls ieee80211linkusechannel for each newly-added link and WARNONONCEs if it fails. The call uses assignonfailure=true, which allows mac8021...

SUSE CVE-2026-74400

In the Linux kernel, the following vulnerability has been resolved: bpf: fix crash in bpfset|removedentryxattr for negative dentries bpfsetdentryxattr and bpfremovedentryxattr BPF kfuncs attempt to lock the inode of the supplied dentry without checking if it is NULL. If a negative dentry is passe...

SUSE CVE-2026-74741

In the Linux kernel, the following vulnerability has been resolved: net: ngbe: fix NULL pointer dereference in non-MSI-X interrupt enabling In non-MSI-X mode such as legacy INTx or single MSI, wx-msixentry is not allocated or initialized. Calling NGBEINTRMISCwx dereferences wx-msixentry-entry,...

SUSE CVE-2026-80524

In the Linux kernel, the following vulnerability has been resolved: optee: ffa: Add NULL check in opteeffalendprotmem Sashiko locally reports a possible null dereference under memory pressure due to the lack of validation of the allocated pointer. Fix that by adding the missing check...

SUSE CVE-2026-80542

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix NULL pointer dereference in amdgpudmcrtcsetvblank amdgpudmcrtcsetvblank dereferences acrtcstate-stream when vblank is enabled/queried from DRMIOCTLMODECRTCGETSEQUENCE before a stream is attached to it. BUG:...

SUSE-SU-2026:2641-1 Security update for apache2

This update for apache2 fixes the following issues Update to 2.4.66 jscPED-16334: Security issues: - CVE-2026-23918: http2: double free and possible RCE on early reset bsc1263957. - CVE-2026-24072: modrewrite elevation of privileges via apexpr bsc1263935. - CVE-2026-28780: heap buffer overflow in...

CVE-2023-54354

A flaw was found in Nokogiri, specifically in its bundled libxml2 library when processing XML schemas. An attacker can exploit this by providing a specially crafted XML schema, leading to a NULL pointer dereference. This can cause the application to crash, resulting in a denial of service...

CVE-2026-80542

A flaw was found in the drm/amd/display component of the Linux kernel. The amdgpudmcrtcsetvblank function attempts to dereference a NULL pointer when vblank is enabled or queried before a display stream is properly attached. This can be triggered by a local attacker running specific graphics test...

CVE-2026-80564

A flaw was found in the Linux kernel's gve component. A local user can trigger a NULL pointer dereference by attempting to use the ptp adjfine function, which has a missing implementation. This vulnerability can lead to a system crash, resulting in a Denial of Service DoS...

CVE-2026-63380

A flaw was found in Libevent, an event notification library. This vulnerability allows a local attacker to trigger a null pointer dereference during specific error handling within the evwsnewsession function. By inducing an allocation or locking failure, an attacker can cause the application to...

Security update for openssl, openssl-3

This update for openssl, openssl-3 fixes the following issues: OpenSSL is updated to 3.5.0 in SLE-15-SP7: jscPED-16072 Enables Post-Quantum Cryptography PQC TLS support Security issues fixed: CVE-2026-42764: NULL pointer dereference in QUIC server initial packet handling bsc1266347 CVE-2026-34182...

CVE-2026-74741

A flaw was found in the Linux kernel's ngbe network driver. In systems configured for non-MSI-X interrupt handling, such as legacy INTx or single MSI modes, a missing initialization of a pointer can lead to a NULL pointer dereference. This vulnerability can cause the system to crash, resulting in...

CVE-2026-80577

A flaw was found in the Linux kernel's drm/panthor driver. When the panthorfwloadsectionentry function processes zero-sized firmware sections, it can leave a memory pointer uninitialized. Subsequent operations that attempt to access this uninitialized memory can lead to a null pointer dereference...

CVE-2026-74738

A flaw was found in the regmap: sdw-mbq component of the Linux kernel. This vulnerability occurs when the regmapsdwmbqpollbusy function attempts to call an unset readablereg callback. If a device responds with COMMANDIGNORED, it can lead to a NULL function pointer dereference. This could...