openssl: NULL Dereference in Certificate Verification with OCSP Checking

A flaw was found in OpenSSL. When an application is configured with specific non-default settings for certificate verification, including both Online Certificate Status Protocol OCSP response checking and partial chain verification, a NULL dereference can occur. This vulnerability can be triggere...

openssl: Possible NULL Dereference in Password-Based CMS Decryption

A flaw was found in OpenSSL. A remote attacker could exploit a NULL pointer dereference vulnerability in the Cryptographic Message Syntax CMS decryption process by providing a specially crafted password-encrypted CMS message. This occurs because the keyDerivationAlgorithm field, which is optional...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100553)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100553 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix NULL deref and buffer over-read in SDP debugfs Why & How...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100700)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100700 advisory. In the Linux kernel, the following vulnerability has been resolved: net/rds: fix NULL deref in rdsibsendcqehandler on masked atomic completion rdsibxmitatomic always...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-100117)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100117 advisory. In the Linux kernel, the following vulnerability has been resolved: ALSA: ac97: Fix possible NULL dereference in sndac97mixer smatch error:...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100548)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100548 advisory. In the Linux kernel, the following vulnerability has been resolved: net/sched: clsfw: fix NULL dereference of old filters before change Like pointed out by Sashiko 1...

RockyLinux 9 : 389-ds-base (RLSA-2026:55423)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:55423 advisory. 389-ds-base: 389-ds-base: pre-auth LDAP filter injection in CleanAllRUV status check CVE-2026-11770 389-ds-base: 389-ds-base: NULL pointer dereference i...

MINI-5GC2-HVCM-4MCP

Bulletin has no description...

MINI-48HR-4H8G-GFQV

Bulletin has no description...

MINI-WJM7-59PC-6W44

Bulletin has no description...

SUSE CVE-2026-74491

In the Linux kernel, the following vulnerability has been resolved: of/address: Fix NULL bus dereference in ofpcirangeparserone The bus matching rework made ofmatchbus return NULL for nodes with ranges/dma-ranges but no local address-cells. parserinit stored that NULL bus, and the range iterator...

UBUNTU-CVE-2026-74442

In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: avoid destroyworkqueueNULL on vkms init failure Two paths through vmwvkmsinit can leave vmw-crcworkq NULL while still leaving the rest of the driver in a state that calls vmwvkmscleanup at module unload: 1...

CVE-2026-74491 of/address: Fix NULL bus dereference in of_pci_range_parser_one()

In the Linux kernel, the following vulnerability has been resolved: of/address: Fix NULL bus dereference in ofpcirangeparserone The bus matching rework made ofmatchbus return NULL for nodes with ranges/dma-ranges but no local address-cells. parserinit stored that NULL bus, and the range iterator...

EUVD-2026-59684

In the Linux kernel, the following vulnerability has been resolved: of/address: Fix NULL bus dereference in ofpcirangeparserone The bus matching rework made ofmatchbus return NULL for nodes with ranges/dma-ranges but no local address-cells. parserinit stored that NULL bus, and the range iterator...

CVE-2026-74491

In the Linux kernel, the following vulnerability has been resolved: of/address: Fix NULL bus dereference in ofpcirangeparserone The bus matching rework made ofmatchbus return NULL for nodes with ranges/dma-ranges but no local address-cells. parserinit stored that NULL bus, and the range iterator...

CVE-2026-74491

The CVE-2026-74491 entry describes a Linux kernel vulnerability where a NULL bus dereference could occur in the PCI range parser (of_pci_range_parser_one) due to the bus matching rework: of_match_bus() could return NULL for nodes with ranges/dma-ranges but no local #address-cells. The fix rejects...

EUVD-2026-59749

In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: avoid destroyworkqueueNULL on vkms init failure Two paths through vmwvkmsinit can leave vmw-crcworkq NULL while still leaving the rest of the driver in a state that calls vmwvkmscleanup at module unload: 1...

CVE-2026-74442

CVE-2026-74442 affects the Linux kernel drm/vmwgfx/vkms code. Two code paths in vmw_vkms_init() can leave vmw->crc_workq NULL while the driver is not fully unload-safe, causing a panic when vmw_vkms_cleanup() runs destroy_workqueue(NULL). Fixes: (1) remove the early return so the workqueue is ...

CVE-2026-74442 drm/vmwgfx: avoid destroy_workqueue(NULL) on vkms init failure

In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: avoid destroyworkqueueNULL on vkms init failure Two paths through vmwvkmsinit can leave vmw-crcworkq NULL while still leaving the rest of the driver in a state that calls vmwvkmscleanup at module unload: 1...

CVE-2026-74395

In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Fix devx subscribe-event unwind NULL dereference MLX5IBMETHODDEVXSUBSCRIBEEVENT links eventsub into sublist before initializing the fields used by the shared error path. If eventfdctxfdget then fails, the unwind path...