CVE-2026-72385

A flaw was found in the Linux kernel's tracing/fprobe component. A race condition can occur in the fprobefgraphentry function during shadow-stack reservation. If a fprobe is registered on an already-live IP between two processing walks, it can lead to a NULL pointer dereference. This can result i...

SUSE-SU-2026:23210-1 Security update for patch

This update for patch fixes the following issues - CVE-2021-45261: Invalid Pointer via anotherhunk function bsc1194037. - CVE-2026-56288: crafted unified-diff patch file can cause null pointer derefence bsc1271167. - CVE-2026-56289: improper validation of hunk line offsets can lead to denial of...

CVE-2026-72242

A flaw was found in the Linux kernel's SELinux module. When handling Stream Control Transmission Protocol SCTP connections, a specific function attempts to access a network socket that may not exist. This can lead to a system crash, resulting in a Denial of Service DoS for affected systems...

389-ds-base: 389-ds-base: NULL pointer dereference in deref control plugin BER parser

A flaw was found in 389 Directory Server. The dereference control plugin does not check for allocation failure before using a BER structure, allowing an unauthenticated remote attacker to crash the LDAP server when the system is under memory pressure...

Important: Red Hat Security Advisory: redhat-ds:12 security update

An update for the redhat-ds:12 module is now available for Red Hat Directory Server 12.4 E4S for RHEL 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

Important: Red Hat Security Advisory: redhat-ds:12 security update

An update for the redhat-ds:12 module is now available for Red Hat Directory Server 12.2 E4S for RHEL 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

389-ds-base: 389-ds-base: NULL pointer dereference in deref control plugin BER parser

A flaw was found in 389 Directory Server. The dereference control plugin does not check for allocation failure before using a BER structure, allowing an unauthenticated remote attacker to crash the LDAP server when the system is under memory pressure...

Important: Red Hat Security Advisory: redhat-ds:11 security update

An update for the redhat-ds:11 module is now available for Red Hat Directory Server 11.7 E4S for RHEL 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

389-ds-base: 389-ds-base: NULL pointer dereference in deref control plugin BER parser

A flaw was found in 389 Directory Server. The dereference control plugin does not check for allocation failure before using a BER structure, allowing an unauthenticated remote attacker to crash the LDAP server when the system is under memory pressure...

K000162966: Multiple Linux kernel vulnerabilities

Security Advisory Description CVE-2026-53384 In the Linux kernel, the following vulnerability has been resolved: serial: 8250dw: unregister 8250 port if clknotifierregister fails dw8250probe registers the 8250 port via serial8250register8250port and then, if the device has a clock, registers a...

SUSE CVE-2026-68157

In the Linux kernel, the following vulnerability has been resolved: libceph: guard missing CRUSH type name lookup Localized read selection can walk a parent bucket whose name exists in the CRUSH map while its type has no matching entry in typenames. getimmediateparent then dereferences a NULL...

SUSE CVE-2026-70459

rsync 3.0.0 before 3.5.0 contains a null pointer dereference vulnerability in the daemon child process that allows remote attackers to crash the daemon by sending a file list whose first entry is a dot entry not typed as a directory. The daemon dereferences the first file list entry as a director...

Red Hat Security Advisory 2026-55756-03

Red Hat Security Advisory 2026-55756-03 - An update for the 389-ds:1.4 module is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On. Issues addressed include buffer overflow and null...

Red Hat Security Advisory 2026-55757-03

Red Hat Security Advisory 2026-55757-03 - An update for the 389-ds:1.4 module is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On. Issues addressed include buffer overflow and null...

CVE-2026-50126: Out-of-bounds Read

Adaguc-server is an open source geographical information system to visualize, combine, compare and share real-time meteorological, climatological and remote sensing data via OGC standards. Versions prior to 7.2.2 crash with a memory-safety fault when it parses a GeoJSON document whose geometry...

Red Hat Security Advisory 2026-55758-03

Red Hat Security Advisory 2026-55758-03 - An update for 389-ds-base is now available for Red Hat Enterprise Linux 7 Extended Lifecycle Support. Issues addressed include buffer overflow and null pointer vulnerabilities...

Red Hat Security Advisory 2026-56048-03

Red Hat Security Advisory 2026-56048-03 - An update for the redhat-ds:12 module is now available for Red Hat Directory Server 12.2 E4S for RHEL 9. Issues addressed include buffer overflow and null pointer vulnerabilities...

Red Hat Security Advisory 2026-55794-03

Red Hat Security Advisory 2026-55794-03 - An update for the 389-ds:1.4 module is now available for Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions and Red Hat Enterprise Linux 8.8 Telecommunications Update Service. Issues addressed include buffer overflow and null pointer...

CVE-2026-73502: NULL Pointer Dereference

kin-openapi is a Go project for handling OpenAPI files. From 0.2.0 until 0.144.0, openapi3filter.ValidateRequest can encounter a NULL-pointer-dereference denial of service when an operation declares a content parameter whose application/json media type has no schema. In...

Red Hat Security Advisory 2026-56050-03

Red Hat Security Advisory 2026-56050-03 - An update for the redhat-ds:12 module is now available for Red Hat Directory Server 12.4 E4S for RHEL 9. Issues addressed include buffer overflow and null pointer vulnerabilities...