PT-2026-136159

Name of the Vulnerable Software and Affected Versions FreeRDP versions prior to 3.32.2 Description A NULL pointer dereference occurs when a malicious RDP server sends a zero-width RDPGFX ResetGraphics PDU. This causes a failed resize in the gdi resize ex function, which leaves the primary display...

PT-2026-136083

In the Linux kernel, the following vulnerability has been resolved: tracing: Do not initialize tracefs work if tracing is disabled If trace buffer allocation fails during early boot e.g. in early trace init - allocate trace buffers, tracing disabled is left set to 1 and the global trace array...

Linux Distros Unpatched Vulnerability : CVE-2026-99247

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - tracing: Do not initialize tracefs work if tracing is disabled If trace buffer allocation fails during early boot e.g. in earlytraceinit - allocatetracebuffers,...

CVE-2026-121402: FreeRDP: FreeRDP before 3.32.2 contains a NULL pointer dereference vulnerability that allows malicious RDP servers to crash…

FreeRDP before 3.32.2 contains a NULL pointer dereference vulnerability that allows malicious RDP servers to crash xfreerdp clients by sending a zero-width RDPGFX ResetGraphics PDU. The failed resize in gdiresizeex leaves the primary display null without ending the session, so a later bitmap upda...

CVE-2026-43603: AMD: A NULL pointer dereference in the Linux GPU driver could potentially lead to a kernel crash and result in denial of…

A NULL pointer dereference in the Linux GPU driver could potentially lead to a kernel crash and result in denial of service...

PT-2026-136093

In the Linux kernel, the following vulnerability has been resolved: gpio: shared: gracefully handle no-device lookup of shared GPIOs We use platform lookup tables for shared GPIOs. This mechanism needs a struct device to work so fwnode-based lookup with no device associated currently causes a...

Linux Distros Unpatched Vulnerability : CVE-2026-99257

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - gpio: shared: gracefully handle no-device lookup of shared GPIOs We use platform lookup tables for shared GPIOs. This mechanism needs a struct device to work so...

PT-2026-136242

A NULL pointer dereference in the Linux GPU driver could potentially lead to a kernel crash and result in denial of service...

PT-2026-136158

Name of the Vulnerable Software and Affected Versions FreeRDP versions prior to 3.32.2 Description A denial of service issue exists where the rdg process packet function dispatches a PKT TYPE EXTENDED AUTH MSG without verifying the negotiated mode or authentication context. A malicious or...

PT-2026-136258

HDF5 through 2.2.0 contains a NULL pointer dereference vulnerability in H5HL unprotect in src/H5HL.c. H5HL protect pins a single metadata cache entry for a local heap, either the heap prefix or the separate data block, and H5HL unprotect unpins it on the final unprotect. When the metadata cache...

CVE-2026-120758: The HDF Group HDF5: HDF5 through 2.2.0 contains a NULL pointer dereference vulnerability in H5HL_unprotect() in src/H5HL.c

HDF5 through 2.2.0 contains a NULL pointer dereference vulnerability in H5HLunprotect in src/H5HL.c. H5HLprotect pins a single metadata cache entry for a local heap, either the heap prefix or the separate data block, and H5HLunprotect unpins it on the final unprotect. When the metadata cache...

CVE-2026-121401: FreeRDP: FreeRDP before 3.32.2 contains a denial of service vulnerability where rdg_process_packet dispatches a…

FreeRDP before 3.32.2 contains a denial of service vulnerability where rdgprocesspacket dispatches a PKTTYPEEXTENDEDAUTHMSG without verifying negotiated mode or auth context. A malicious or compromised RD Gateway can send the extended-auth packet before tunnel authentication, triggering a...

CVE-2026-99257

In the Linux kernel, the following vulnerability has been resolved: gpio: shared: gracefully handle no-device lookup of shared GPIOs We use platform lookup tables for shared GPIOs. This mechanism needs a struct device to work so fwnode-based lookup with no device associated currently causes a...

AMD Ryzen 4000 Series Mobile Processors with Radeon Graphics improper exception handling vulnerability

The AMD Ryzen 4000 Series mobile processors with Radeon graphics contain an improper exception handling vulnerability. This vulnerability stems from a null pointer dereference in the Linux GPU driver, which may lead to a kernel crash and resulting in a denial of service...

Improper HDF Group HDF5 exception handling vulnerability

Versions 2.2.0 and earlier of the HDF Group’s HDF5 contain an improper exception handling vulnerability. This vulnerability arises because the H5HLunprotect function passes a null pointer to H5ACunpinentry when no fixed cache object can be unmounted; this may result in a null pointer dereference,...

kernel: Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error

A flaw was found in the Linux kernel's Bluetooth Host Controller Interface HCI Universal Asynchronous Receiver/Transmitter UART driver. When the hciregisterdev function fails, a flag indicating protocol initialization is not properly cleared. This oversight allows incoming UART data to be process...

Critical: Red Hat Security Advisory: kernel security, bug fix, and enhancement update

An update for kernel is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

kernel: net: bridge: use a stable FDB dst snapshot in RCU readers

A flaw was found in the Linux kernel. Inconsistent handling of local Forwarding Database FDB entries in the bridge networking component's RCU Read-Copy-Update readers can lead to a null-pointer dereference. A local attacker could exploit this by triggering a concurrent update to an FDB entry,...

CVE-2026-115403

In Eclipse ThreadX NetX Duo versions 6.0 through 6.5.2.202603a, built with BSD raw socket and IPv6 support, the IPv6 raw send path uses the destination-table entry it adds without checking that the add succeeded. When the destination table is full and an off-link destination is reached through a...

CVE-2026-115403 NULL pointer dereference in the BSD raw IPv6 send path when the destination table is full

In Eclipse ThreadX NetX Duo versions 6.0 through 6.5.2.202603a, built with BSD raw socket and IPv6 support, the IPv6 raw send path uses the destination-table entry it adds without checking that the add succeeded. When the destination table is full and an off-link destination is reached through a...