CVE-2026-74426

A flaw was found in the Linux kernel's AFS Andrew File System component. A local user can exploit this by triggering a specific memory allocation condition during a mount operation, leading to a null pointer dereference. This can cause the system to crash, resulting in a Denial of Service DoS...

CVE-2026-74414

A flaw was found in the Linux kernel's HFS Plus hfsplus filesystem. A local user could trigger a null-pointer dereference by executing the setxattr function in userspace when the attributes file is not properly loaded during system mount. This vulnerability is caused by a duplicate attribute inod...

CVE-2026-74406

A flaw was found in the Linux kernel's Virtual Extensible LAN VXLAN component. A race condition can occur where the udptunnelsockrelease function sets a socket's user data to NULL while the vxlangropreparereceive function is still actively using it. This could lead to a null pointer dereference,...

CVE-2026-76166

CVE-2026-76166 is an unauthenticated denial-of-service vulnerability in mod_cluster 's AdvertiseListenerImpl (org.jboss.modcluster core module). A single crafted UDP multicast datagram containing a valid HTTP status line and a Server: header but missing the Date:, Digest:, and Sequence: headers t...

K000162987: Linux kernel vulnerability CVE-2026-53313

Security Advisory Description In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Avoid NULL dereference in dcdmubsrv error paths In dcdmubsrvlogdiagnosticdata and dcdmubsrvenabledpiatrace. Both functions check: if !dcdmubsrv || !dcdmubsrv-dmub and then call...

CVE-2026-53965

creationtimestamp| type| source ---|---|--- 2026-08-19 08:01:24+00:00| seen| https://gist.github.com/FR-Flo/a82f37135301a238c85c6769b4acc044 2026-08-19 08:25:35+00:00| seen| https://gist.github.com/FR-Flo/a3cc74f208df80c1d7f4b5b3e98e4f77 2026-08-19 13:18:57+00:00| seen|...

CVE-2026-72316

A flaw was found in the Linux kernel's device mapper dm era target. When the metadataopen function fails to allocate memory, it returns a NULL pointer. The calling function, eractr, does not correctly validate this return, leading to a NULL pointer dereference when the metadata is accessed. This...

CVE-2026-72257

A flaw was found in the Linux kernel's ASoC Advanced Linux Sound Architecture System on Chip qcom q6apm component. A race condition can occur when the q6apmfreefragments function frees audio buffers while graphcallback attempts to access a freed buffer due to a late Digital Signal Processor DSP...

CVE-2026-72254

A flaw was found in the Linux kernel's netfilter subsystem. A local attacker could exploit a vulnerability where a fib expression in a netdev egress base chain incorrectly dereferences a NULL pointer. This can lead to a NULL pointer dereference, causing a system crash and resulting in a Denial of...

CVE-2026-72424

A flaw was found in the Linux kernel's rtc: msc313 component. During the probe phase, a shared Interrupt Request IRQ handler could be triggered by another device before the necessary driver data was fully initialized. This could lead to a null pointer dereference, where the system attempts to...

CVE-2026-55984

A flaw was found in Gitea. An authenticated attacker could exploit a null pointer dereference within the AddTime API. This can lead to a denial of service DoS, making the application unavailable to legitimate users...

CVE-2026-72327

A flaw was found in the Linux kernel's drm/v3d component. The v3dgetcpuindirectcsdparams function does not properly validate a userspace-supplied indirect buffer object BO handle. An attacker, by providing a bogus or stale handle, can cause a NULL pointer dereference. This can lead to a system...

CVE-2026-72403

A flaw was found in the ALSA FireWire Control Protocol FCP component of the Linux kernel. A local attacker with a specially crafted USB device could trigger a NULL pointer dereference. This occurs because the fcpfindfcinterface function attempts to access an endpoint descriptor from a malformed U...

CVE-2026-76014

A vulnerability has been found in BusyBox up to 1.30.1. This vulnerability affects unknown code of the file networking/wget.c of the component FEATUREWGETTIMEOUT Handler. Such manipulation of the argument -T leads to null pointer dereference. Local access is required to approach this attack. The...

DEBIAN-CVE-2026-76014

A vulnerability has been found in BusyBox up to 1.30.1. This vulnerability affects unknown code of the file networking/wget.c of the component FEATUREWGETTIMEOUT Handler. Such manipulation of the argument -T leads to null pointer dereference. Local access is required to approach this attack. The...

CVE-2026-76014

A vulnerability has been found in BusyBox up to 1.30.1. This vulnerability affects unknown code of the file networking/wget.c of the component FEATUREWGETTIMEOUT Handler. Such manipulation of the argument -T leads to null pointer dereference. Local access is required to approach this attack. The...

UBUNTU-CVE-2026-76014

A vulnerability has been found in BusyBox up to 1.30.1. This vulnerability affects unknown code of the file networking/wget.c of the component FEATUREWGETTIMEOUT Handler. Such manipulation of the argument -T leads to null pointer dereference. Local access is required to approach this attack. The...

CVE-2026-76014 BusyBox FEATURE_WGET_TIMEOUT wget.c null pointer dereference

A vulnerability has been found in BusyBox up to 1.30.1. This vulnerability affects unknown code of the file networking/wget.c of the component FEATUREWGETTIMEOUT Handler. Such manipulation of the argument -T leads to null pointer dereference. Local access is required to approach this attack. The...

CVE-2026-76014

A vulnerability has been found in BusyBox up to 1.30.1. This vulnerability affects unknown code of the file networking/wget.c of the component FEATUREWGETTIMEOUT Handler. Such manipulation of the argument -T leads to null pointer dereference. Local access is required to approach this attack. The...

CVE-2026-76014 BusyBox FEATURE_WGET_TIMEOUT wget.c null pointer dereference

A vulnerability has been found in BusyBox up to 1.30.1. This vulnerability affects unknown code of the file networking/wget.c of the component FEATUREWGETTIMEOUT Handler. Such manipulation of the argument -T leads to null pointer dereference. Local access is required to approach this attack. The...