34588 matches found
Linux Distros Unpatched Vulnerability : CVE-2026-74407
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: ath11k: cancel SSR work items during PCI shutdown A reboot can crash the kernel if it overlaps with WLAN firmware crash recovery SSR. The crash is a NULL...
Linux Distros Unpatched Vulnerability : CVE-2026-74379
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - dax/kmem: account for partial discontiguous resource upon removal When devdaxkmemprobe partially succeeds at least one range is mapped but a subsequent range...
Linux Distros Unpatched Vulnerability : CVE-2026-72242
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - selinux: avoid sksocket dereference in selinuxsctpbindconnect selinuxsctpbindconnect dereferences sk-sksocket to pass a struct socket to selinuxsocketbind and...
Linux Distros Unpatched Vulnerability : CVE-2026-74441
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - usb: typec: ucsi: Fix race condition and ordering in port unregistration A synchronization issue exists during port unregistration where pending partner work...
SUSE CVE-2026-68272
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: validate CPGFXSHADOW chunk size in CS pass1 Add a minimum-length check for the AMDGPUCHUNKIDCPGFXSHADOW chunk in amdgpucspass1, matching the gate already present for the IB, FENCE and BOHANDLES chunk types. The...
SUSE CVE-2026-68275
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: check amdgpuvmbofind result in GETMAPPINGINFO The AMDGPUGEMOPGETMAPPINGINFO path of amdgpugemopioctl looks up the bova for the buffer object in the caller's VM via amdgpuvmbofind, but uses the returned pointer without...
SUSE CVE-2026-68306
In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7996: fix possible NULL-pointer deref in mt7996mcustabfereht mt76connacgetehtphycap routine can theoretically return NULL so check cap pointer before dereferencing it...
SUSE CVE-2026-68308
In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7996: check pointer returned by mt76connacgethephycap mt76connacgethephycap routine can theoretically return NULL so check cap pointer before dereferencing it...
SUSE CVE-2026-68309
In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: connac: fix possible NULL-pointer deref in mt76connacmcuunibsshetlv mt76connacgethephycap routine can theoretically return NULL so check cap pointer before dereferencing it...
SUSE CVE-2026-68362
In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: fix NULL pointer dereference in ath11khalsrngaccessbegin In ATH11KQMIEVENTFWREADY, ATH11KFLAGREGISTERED is set unconditionally even when ath11kcoreqmifirmwareready fails. This leaves the driver in an inconsistent...
Oracle Linux 10 : kernel (ELSA-2026-36956)
The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-36956 advisory. - crypto: ccp - copy IV using skcipher ivsize CKI Backport Bot RHEL-188463 CVE-2026-53016 - futex/requeue: Revert 'Prevent NULL pointer dereference i...
The vulnerability of the net/sctp/sm_statefuns.c component in the Linux operating system allows a hacker to trigger a service failure.
The vulnerability of the net/sctp/smstatefuns.c component in the Linux operating system is related to pointer dereferencing errors. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability in the core/sock.c component of the Linux operating system allows a hacker to cause a service failure.
The vulnerability in the core/sock.c component of the Linux operating system is related to pointer dereferencing errors. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability in the `drivers/net/bonding/bond_main.c` component of the Linux operating system allows a hacker to cause a service failure.
The vulnerability in the drivers/net/bonding/bondmain.c component of the Linux operating system is related to pointer dereferencing errors. Exploiting this vulnerability can allow an attacker to cause a service failure...
Use of Uninitialized Resource
Overview Affected versions of this package are vulnerable to Use of Uninitialized Resource in the daemon process. An attacker can cause the service to crash by sending a specially crafted file list where the first entry is a dot entry not typed as a directory, leading to a null pointer dereferenc...
CVE-2026-35590
A flaw was found in libvips. The EXIF decoder did not properly verify the range of EXIF tag groups, which could lead to a null pointer dereference. A local user could exploit this by providing specially crafted EXIF data, causing the application to crash and resulting in a denial of service...
CVE-2026-55984
Null Pointer Dereference in AddTime API Causes Authenticated Denial of Service...
CVE-2026-55984
CVE-2026-55984 is a vulnerability in Gitea involving a null pointer dereference in the AddTime API that allows an authenticated attacker to cause a Denial of Service. The issue is triggered by the AddTime function and is documented with a PoC/exploitation note in metrics. Affected product: Gitea ...
