88237 matches found
Astra Linux – vulnerability in linux-6.1
In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: Add missing hwops-getringselector for IPQ5018 During data transmission after clients have connected, hwops-getringselector is called. However, for IPQ5018, this member is not set, resulting in a NULL pointer...
Astra Linux – vulnerability in linux-6.1
In the Linux kernel, the following vulnerability has been resolved: mtd: maps: vmu-flash: fix NULL pointer dereference in initialization The mtdinfo contains a struct device, which must be linked to its parent. Without this, the initialization of the MTD fails with a NULL pointer dereference...
Astra Linux – vulnerability in linux-6.1
In the Linux kernel, the following vulnerability has been resolved: i2c: imx: Cancel hrtimer before clearing slave pointer In i2cimxunregslave, the slave pointer is set to NULL after disabling interrupts. However, a pending interrupt might have already started the hrtimer i2cimxslavetimeout befor...
Astra Linux – vulnerability in linux-6.1
In the Linux kernel, the following vulnerability has been resolved: packet: synchronize pressure clearing with ring reconfiguration packetsetring updates the RX ring state under skreceivequeue.lock; however, it uses po-prothook.func to publish the tpacket receive mode after releasing that lock...
Astra Linux – vulnerability in linux-6.1
In the Linux kernel, the following vulnerability has been resolved: vmalloc: fix NULL pointer dereference in isvmareahugepages findvmarea may return NULL if the given address is not a valid vmalloc area. Verify the return value before dereferencing it to prevent a kernel crash...
Astra Linux – vulnerability in linux-6.1
In the Linux kernel, the following vulnerability has been resolved: sctp: fix NULL deref on untransmitted RECONF completion sctpprocessstrresetoutreq, sctpprocessstrresetaddstrmout and sctpprocessstrresetresp complete a pending stream reconfiguration request by stopping the reconf timer on the...
Astra Linux – vulnerability in linux-6.1
In the Linux kernel, the following vulnerability has been resolved: usb: gadget: fuac1legacy: remove broken string configfs attributes The UAC1STRATTRIBUTE macro defines configfs show/store handlers for the fnplay, fncap, and fncntl string options. The store function contains an inverted null che...
Astra Linux – vulnerability in linux-6.1
In the Linux kernel, the following vulnerability has been resolved: nvmet: fix NULL pointer dereference in nvmetexecuteidentifynszns When a host issues an Identify command with CNS 05h I/O Command Set specific Identify Namespace and CSI 02h ZNS targeting a file-backed namespace,...
Astra Linux – vulnerability in linux-6.1
In the Linux kernel, the following vulnerability has been resolved: drm/sun4i: crtc: Propagate layer initialization error sun4icrtcinit returns plain NULL when layer initialization fails, while all its other error paths return an error pointer. The only caller, sun4itconbind, checks the result wi...
Astra Linux – vulnerability in linux-6.1
In the Linux kernel, the following vulnerability has been resolved: usb: gadget: udc: Fix use-after-free in gadgetmatchdriver The udc structure serves as the management structure for the gadget, but their lifecycle is decoupled. A race condition exists where usbdelgadget frees the udc memory e.g....
Astra Linux – vulnerability in linux-6.1
In the Linux kernel, the following vulnerability has been resolved: phy: qcom: snps-femto-v2: Fix possible NULL-deref on early runtime suspend Runtime PM must be enabled before creating the PHY, since phycreate only enables runtime PM on the PHY device if it is already enabled on this parent...
Astra Linux – vulnerability in linux-6.1
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: mgmt: fix 'hdev-discovery.uuids' NULL dereference 'uuidcount' member of struct 'discoverystate' is assigned and read without any locks, so there is a chance of situation when uuidcount != 0, but uuids is NULL and there...
CVE-2026-99193
A flaw was found in the Linux kernel's Texas Instruments PRU Ethernet driver. A local user capable of triggering network device initialization can cause a Denial of Service DoS by crashing the operating system. When the network interface is probed on a system with network traffic shaping enabled,...
CVE-2026-99183
A flaw was found in the Linux kernel's Rocket accelerator driver. When unbinding an accelerator core while workloads are actively executing, the driver fails to properly search all remaining core slots during scheduler lookups, resulting in an unchecked null reference. A privileged local user cou...
FreeRDP: FreeRDP: Denial of Service via crafted Surface Bits command
A flaw was found in FreeRDP. A malicious Remote Desktop Protocol RDP server can trigger a null pointer dereference in the gdisurfacebits function by sending a specially crafted Surface Bits command that claims to use the NSCodec codec ID. This vulnerability exists even when the NSCodec is disable...
CVE-2026-57195
A flaw was found in Asterisk. An unauthenticated remote attacker can cause a Denial of Service DoS by exploiting a null pointer dereference within the Asterisk Manager Interface AMI. When HTTP digest authentication is configured, sending a specially crafted request crashes the Asterisk service,...
CVE-2026-101175
Null pointer dereference vulnerability in the ArkWeb module. Impact: Successful exploitation of this vulnerability may affect availability...
EUVD-2026-115075
Null pointer dereference vulnerability in the ArkWeb module. Impact: Successful exploitation of this vulnerability may affect availability...
CVE-2026-101175
A null pointer dereference vulnerability exists in the ArkWeb module . Successful exploitation of this flaw may impact the availability of the affected system. The documentation does not provide specific software versions, root cause details beyond the vulnerability type, or evidence of in-the-wi...
