PHP 8.4.x < 8.4.16 Multiple Vulnerabilities

According to its self-reported version number, the version of PHP installed on the remote host is 8.2.x prior to 8.2.30, 8.3.x prior to 8.3.29, 8.4.x prior to 8.4.16, or 8.5.x prior to 8.5.1. It is, therefore, affected by multiple vulnerabilities: - Information leak of memory in getimagesize...

Linux Distros Unpatched Vulnerability : CVE-2023-54204

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mmc: sunplus: fix return value check of mmcaddhost mmcaddhost may return error, if we ignore its return value, 1. the memory allocated in mmcallochost will be...

PHP 8.3.x < 8.3.29 Multiple Vulnerabilities

According to its self-reported version number, the version of PHP installed on the remote host is 8.2.x prior to 8.2.30, 8.3.x prior to 8.3.29, 8.4.x prior to 8.4.16, or 8.5.x prior to 8.5.1. It is, therefore, affected by multiple vulnerabilities: - Information leak of memory in getimagesize...

CVE-2025-68752: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: iavf: Implement settime64 with -EOPNOTSUPP ptpclocksettime assumes every ptpclock has implemented settime64. Stub it with -EOPNOTSUPP to prevent a NULL dereference. The fix is similar to commit 329d050bbe63 "gve: Implement...

PT-2026-1240

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw within the ptp clock settime function. This function incorrectly assumes that every precision time protocol PTP clock has implemented the settime64...

CVE-2025-48768

Release of Invalid Pointer or Reference vulnerability was discovered in fs/inode/fsinoderemove code of the Apache NuttX RTOS that allowed root filesystem inode removal leading to a debug assert trigger that is disabled by default, NULL pointer dereference handled differently depending on the targ...

EUVD-2026-0013

Release of Invalid Pointer or Reference vulnerability was discovered in fs/inode/fsinoderemove code of the Apache NuttX RTOS that allowed root filesystem inode removal leading to a debug assert trigger that is disabled by default, NULL pointer dereference handled differently depending on the targ...

PT-2026-20367

Name of the Vulnerable Software and Affected Versions libp11-kit versions prior to 0.26.2-1.1 Description The software contains a NULL dereference issue occurring via the C DeriveKey function when provided with specific NULL parameters. Recommendations Update to libp11-kit version 0.26.2-1.1 or...

PT-2026-5542

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel’s DRM/GUD subsystem. Specifically, a NULL pointer dereference can occur on display disconnect due to the drm atomic helper disable all function setting...

PT-2026-28331

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw within the icmp tag validation function. This function unconditionally dereferences a pointer without a preceding NULL check. Specifically, it dereferenc...

PT-2026-5522

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel’s networking subsystem related to Marvell Prestera devices. A failure in the devlink alloc function to allocate memory can lead to a NULL pointer...

SUSE CVE-2022-50877

In the Linux kernel, the following vulnerability has been resolved: net: broadcom: bcm4908enet: update TX stats after actual transmission Queueing packets doesn't guarantee their transmission. Update TX stats after hardware confirms consuming submitted data. This also fixes a possible race and NU...

SUSE CVE-2023-54233

In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: avoid a NULL dereference with unsupported widgets If an IPC4 topology contains an unsupported widget, its .moduleinfo field won't be set, then sofipc4routesetup will cause a kernel Oops trying to dereference it. Add a...

SUSE CVE-2023-54261

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Add missing gfx11 MQD manager callbacks mqdstride function was introduced in commit 2f77b9a242a2 "drm/amdkfd: Update MQD management on multi XCC setup" but not assigned for gfx11. Fixes a NULL dereference in debugfs...

SUSE CVE-2023-54274

In the Linux kernel, the following vulnerability has been resolved: RDMA/srpt: Add a check for valid 'madagent' pointer When unregistering MAD agent, srpt module has a non-null check for 'madagent' pointer before invoking ibunregistermadagent. This check can pass if 'madagent' variable holds an...

SUSE CVE-2023-54289

In the Linux kernel, the following vulnerability has been resolved: scsi: qedf: Fix NULL dereference in error handling Smatch reported: drivers/scsi/qedf/qedfmain.c:3056 qedfallocglobalqueues warn: missing unwind goto? At this point in the function, nothing has been allocated so we can return...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-992974)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992974 advisory. In the Linux kernel, the following vulnerability has been resolved: virtio-gpu: fix a missing check to avoid NULL dereference 'cacheent' could be set NULL inside...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-993025)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-993025 advisory. In the Linux kernel, the following vulnerability has been resolved: qed/qedsriov: guard against NULL derefs from qediovgetvfinfo We have to make sure that the info...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-993225)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-993225 advisory. In the Linux kernel, the following vulnerability has been resolved: dm stats: check for and propagate allocpercpu failure Check allocprecpu's return value and return...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-993083)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-993083 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: nfttproxy: restrict to prerouting hook TPROXY is only allowed from prerouting, but...