PT-2026-98644

In the Linux kernel, the following vulnerability has been resolved: s390/debug: Fix NULL pointer dereference in debug set level Commit a2cec6863709 "s390/debug: Add s390dbf kernel parameter" incorrectly removed a null-id check from debug set level, introducing a possible NULL pointer dereference...

CVE-2026-97593

In the Linux kernel, the following vulnerability has been resolved: iommu/s390: Fix NULL dereference in iovatophys with ZPCITABLETYPERFX When using a 5-level translation table via ZPCITABLETYPERFX getrsofromiova returns NULL when the region-first entry is invalid. Yet in getrtofromiova the...

PT-2026-98653

In the Linux kernel, the following vulnerability has been resolved: vduse: validate virtqueue alignment vduse validate config only checks the upper bound of vq align. Invalid values can therefore reach vring create virtqueue map. The split-ring helpers use align - 1 as a bit mask, so the alignmen...

CVE-2026-88389

Espruino 2v29 (commit bffc6d0 ) is susceptible to a NULL pointer dereference vulnerability within the jslGetRawString() function in src/jslex.c. Processing crafted raw or binary string input can cause the lexer to pass a NULL iterator target to jsvLockAgain(). In RELEASE/NO_ASSERT builds, the abs...

PT-2026-98611

In the Linux kernel, the following vulnerability has been resolved: x86/amd node: Fix potential NULL pointer dereference amd smn read/write are exported functions around amd smn rw, so they are always available even if amd smn init fails. In that case, 'amd roots' is NULL and amd smn rw will acce...

CVE-2026-88389

Espruino 2v29 commit bffc6d0 contains a NULL pointer dereference vulnerability in jslGetRawString in src/jslex.c. Crafted raw/binary string input can cause the lexer to pass a NULL iterator target to jsvLockAgain. In RELEASE/NOASSERT builds, the missing assertion guard allows a write through the...

Linux Distros Unpatched Vulnerability : CVE-2026-98037

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bpf: Reject untrusted allocated-object pointers When the final RCU read-side critical section ends, a local kptr is demoted to PTRUNTRUSTED but retains MEMALLOC...

Linux Distros Unpatched Vulnerability : CVE-2026-93210

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - smb: client: harden DFS cache against invalid target hints Currently, gettgtname returns ERRPTR-ENOENT when ce-tgthint is NULL, and dfscachenorequpdatetgthint...

Linux Distros Unpatched Vulnerability : CVE-2026-98129

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - scsi: mpi3mr: Fix NULL pointer dereference in mpi3mrsasportadd sasportallocnum can return NULL on memory allocation failure. The return value is passed directly...

Linux Distros Unpatched Vulnerability : CVE-2026-98043

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bpf: Don't infer non-NULL from a pointer with an unbounded offset regnotnull decides that a register holds a non-NULL value by looking at its type alone. For...

Fedora 44 : 389-ds-base (2026-b16c9cbc0f)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-b16c9cbc0f advisory. - Resolves: rhbz2492927 CVE-2026-11774 389-ds-base: 389-ds-base: integer overflow in SASL packet length bypasses size limit leading to heap buffer...

Linux Distros Unpatched Vulnerability : CVE-2026-97947

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - x86/amdnode: Fix potential NULL pointer dereference amdsmnread/write are exported functions around amdsmnrw, so they are always available even if amdsmninit...

Linux Distros Unpatched Vulnerability : CVE-2026-97975

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Bluetooth: hcisysfs: Fix NULL pointer dereference in devicedel A NULL pointer dereference in klistput occurs when a child device such as a BNEP network device i...

Linux Distros Unpatched Vulnerability : CVE-2026-98008

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: macb: fix NULL pointer dereference on unbind with fixed-link When the device tree describes a fixed- link and has no mdio child node, macbmiiinit returns...

Linux Distros Unpatched Vulnerability : CVE-2026-98098

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - tipc: fix NULL deref in tipcnamednodeup on empty publication list User-space applications can bind a large number of service addresses to one or more sockets...

Linux Distros Unpatched Vulnerability : CVE-2026-97570

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: bnxten: Bound SW TPA IDs to prevent crashes FW supports up to 1024 concurrent TPAs, so the F...

Linux Distros Unpatched Vulnerability : CVE-2026-98059

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bpf: Mark schedprocesswait argument as nullable dowait passes wo-wopid to the schedprocesswait tracepoint. kernelwait4 leaves wopid NULL for wait4-1, and...

Linux Distros Unpatched Vulnerability : CVE-2026-97980

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: s390/debug: Fix NULL pointer dereference in debugsetlevel Commit a2cec6863709 s390/debug: Ad...

Linux Distros Unpatched Vulnerability : CVE-2026-97532

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - scsi: qla2xxx: Null out freed pointers in qla2x00memalloc error path When qla2x00memalloc fails, qla2x00probeone jumps to probehwfailed and calls qla2x00memfree...

Debian dla-4795 : libcrypto3-udeb - security update

The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4795 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4795-1 [email protected]...