EUVD-2026-63981

Incus is a system container and virtual machine manager. Prior to version 7.1.0, backend.createDependentVolumesFromBackup in internal/server/storage/backend.go contains a cluster of unguarded pointer derefs on every dependent-volume entry's VolumeSnapshotsi, Volume, and Pool sub-fields. An...

CVE-2026-48754

Incus is a system container and virtual machine manager. Prior to version 7.1.0, backend.createDependentVolumesFromBackup in internal/server/storage/backend.go contains a cluster of unguarded pointer derefs on every dependent-volume entry's VolumeSnapshotsi, Volume, and Pool sub-fields. An...

EUVD-2026-63974

Incus is a system container and virtual machine manager. Prior to version 7.1.0, backend.CreateCustomVolumeFromBackup in internal/server/storage/backend.go contains an unguarded time.Time dereference on the ExpiresAt field of every volume-snapshot entry in an imported custom-volume backup. An...

CVE-2026-74552

A flaw was found in the Linux kernel's hwmon lm90 driver. A local user can trigger a null pointer dereference by reading sysfs attributes before the driver's registration is complete. This can lead to a system crash, resulting in a denial of service...

CVE-2026-14456 vulnerabilities

Vulnerabilities for packages: openssl...

SUSE CVE-2026-68235

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: dce100: skip non-DP stream encoders for DP MST On DCE8-class ASICs e.g. Bonaire, the resource pool contains digital DIG stream encoders plus one analog DAC encoder. When assigning a stream encoder for a second...

SUSE CVE-2026-68239

In the Linux kernel, the following vulnerability has been resolved: drm/ttm: Account for NULL and handle pages in ttmpoolbackup Pages in ttmpoolbackup can be NULL or backup handles ttmbackuppageptrishandle, neither of which can be passed to setpagesarraywb or freed. Add a dedicated WB pass before...

SUSE CVE-2026-68248

In the Linux kernel, the following vulnerability has been resolved: drm/i915: Return NULL on error in activeinstance Avoid returning &node-base when node is NULL due to OOM during GFPATOMIC allocation. Discovered using AI-assisted static analysis confirmed by Intel Product Security. cherry picked...

EUVD-2026-63724

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to a NULL pointer dereference...

EUVD-2026-63638

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to cause a denial of service due to a NULL pointer dereference...

ROS-20260821-73-0057

The vulnerability of the hugetlbfsfillsuper function in the Linux operating system’s memory management subsystem is related to the assignment of the zero pointer. Exploiting this vulnerability can allow an attacker to cause a service failure or increase their privileges...

CVE-2026-17251: NULL Pointer Dereference

A NULL pointer dereference vulnerability exists in the HTTP request parsing functionality of TL-MR6400 v7. An unauthenticated remote attacker can trigger the vulnerability by sending a specially crafted HTTP request containing a malformed session cookie header. Successful exploitation may cause...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2024-002993)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2024-002993 advisory. A null pointer dereference vulnerability was found in ath10kwmitlvoppullmgmttxcomplev in drivers/net/wireless/ath/ath10k/wmi-tlv.c in the Linux kernel. This issue...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-102059)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-102059 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Check NULL before accessing WHAT IGT kmscursorlegacy's...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-001410)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-001410 advisory. In the Linux kernel, the following vulnerability has been resolved: powerpc/powernv: Add a null pointer check in opalpowercapinit kasprintf returns a pointer to...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-102095)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-102095 advisory. In the Linux kernel, the following vulnerability has been resolved: bpf: Enforce expectedattachtype for tailcall compatibility Yinhao et al. recently reported: Our...

PT-2026-79406

A NULL pointer dereference vulnerability exists in the HTTP request parsing functionality of TL-MR6400 v7. An unauthenticated remote attacker can trigger the vulnerability by sending a specially crafted HTTP request containing a malformed session cookie header. Successful exploitation may cause...

ROS-20260821-73-0033

The vulnerability of the exynosdrmcrtcatomicdisable function in the drivers/gpu/drm/exynos/exynosdrmcrtc.c driver of the Samsung SoC Exynos Linux kernel is related to the assignment of a null pointer due to concurrent access to resources race condition. Exploiting this vulnerability can allow an...

ROS-20260821-73-0027

The vulnerability of the iscsiswtcpconnsetparam function in the drivers/scsi/iscsitcp.c file of the Linux SCSI device driver is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

ROS-20260821-73-0032

The vulnerability of the sndhdacregmapsync function in the sound/hda/hdacregmap.c driver of the Linux High-Definition Audio kernel is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...