ROS-20260821-73-0036

The vulnerability of the lpfcunregisterfcfrescan function in the drivers/scsi/lpfc/lpfchbadisc.c file of the Linux kernel’s SCSI subsystem is related to the dereferencing of a null pointer due to concurrent access to resources race condition. Exploiting this vulnerability could allow an attacker ...

MINI-29G5-V7G6-8HGG

Bulletin has no description...

CVE-2026-74435

A flaw was found in the rxrpc subsystem of the Linux kernel. This vulnerability occurs when the rxrpcverifydata function fails to allocate a necessary buffer if the incoming data length is zero. An attacker could exploit this by sending specially crafted network packets, leading to a NULL pointer...

CVE-2026-74430

A flaw was found in the Linux kernel's rxrpc component. A remote attacker could send a specially crafted ACKALL packet that bypasses state validation. This improper handling of forged packets can lead to a null-pointer dereference, causing a Denial of Service DoS by crashing the system...

CVE-2026-74424

A flaw was found in the Linux kernel. The fbcon component, responsible for framebuffer console operations, can encounter a NULL pointer dereference. This occurs when fbconnewmodelist attempts to access console data vcdata that has been freed, leading to a system crash. A local attacker could...

CVE-2026-74400

A flaw was found in the Linux kernel. The BPF Berkeley Packet Filter kfuncs bpfsetdentryxattr and bpfremovedentryxattr do not properly check for a null inode when handling negative dentries. This oversight can lead to a null pointer dereference. Additionally, warnings in bpfxattrreadpermission an...

CVE-2026-74395

A flaw was found in the RDMA/mlx5 component of the Linux kernel. During the devx subscribe-event unwind process, a null pointer dereference can occur if eventfdctxfdget fails. This issue arises because eventsub is linked into sublist before its fields are properly initialized, leading to an attem...

CVE-2026-74418

A flaw was found in the dma-fence subsystem of the Linux kernel. This vulnerability allows for a null pointer dereference in tracepoint functions, such as tracedmafencesignaled, tracedmafencewaitend, and tracedmafencedestroy, after a fence operation has been signaled and its internal pointers...

CVE-2026-74407

A flaw was found in the Linux kernel's ath11k Wi-Fi driver. A race condition exists between the system's reboot or shutdown process and the WLAN firmware crash recovery SSR mechanism. This race condition can lead to a NULL pointer dereference, causing the kernel to crash and resulting in a Denial...

CVE-2026-17165

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to a NULL pointer dereference...

CVE-2026-17009

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to cause a denial of service due to a NULL pointer dereference...

CVE-2026-17165

CVE-2026-17165 affects IBM AIX 7.2, 7.3 and IBM PowerVM VIOS 4.1 . A remote, unauthenticated attacker can trigger a NULL pointer dereference to cause a denial of service . The CVSS 3.1 score is 7.5 (HIGH) with a network attack vector, low complexity, and no required privileges or user interaction...

CVE-2026-17165 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to a NULL pointer dereference...

CVE-2026-17165 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to a NULL pointer dereference...

CVE-2026-17009 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to cause a denial of service due to a NULL pointer dereference...

CVE-2026-17009 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to cause a denial of service due to a NULL pointer dereference...

CVE-2026-17009

IBM AIX 7.2/7.3 and PowerVM VIOS 4.1 contain a NULL pointer dereference exploitable by a local attacker with low privileges, causing denial of service (CVSS 4.7 MEDIUM). Exploitation requires high complexity; no exploit code or in-the-wild activity is documented. The IBM support reference is prov...

K000163013: LibTIFF vulnerabilities CVE-2018-17000, CVE-2018-19210, CVE-2019-7663, CVE-2020-19131, and CVE-2020-19144

Security Advisory Description CVE-2018-17000 A NULL pointer dereference in the function TIFFmemcmp at tifunix.c called from TIFFWriteDirectoryTagTransferfunction in LibTIFF 4.0.9 allows an attacker to cause a denial-of-service through a crafted tiff file. This vulnerability can be triggered by th...

CVE-2026-77641

tor before 0.4.9.9 was prone to a NULL write after free when sending a CONFLUXSWITCH cell fails. The return value of relaysendcommandfromedge was ignored, so a send failure which calls circuitmarkforclose and removes the leg via cfxdelleg would go undetected, causing the caller to write to the...

CVE-2026-74379

A flaw was found in the Linux kernel's dax/kmem module. This vulnerability occurs when the system attempts to remove a memory resource that was not fully initialized, leading to an attempt to access a null pointer. A local attacker could potentially trigger this condition, causing the system to...