PT-2026-98048

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL-pointer dereference can occur in the ASOC mediatek mt8365-afe-pcm component. The function mt8365 afe suspend uses devm kcalloc to allocate a register backup buffer but fails to...

PT-2026-98138

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A null pointer dereference exists during the devcoredump cleanup process. In the xe devcoredump snapshot free function, the ss-gt variable may be NULL if the snapshot was not fully...

PT-2026-104982

In the Linux kernel, the following vulnerability has been resolved: drm/xe: Fix null pointer dereference in devcoredump cleanup In xe devcoredump snapshot free, ss-gt may be NULL when the snapshot was never fully populated e.g., when cleanup is triggered without a prior capture. Guard the xe guc...

Linux Distros Unpatched Vulnerability : CVE-2026-97431

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/amd/display: Avoid DPMS-on for phantom stream Why & How Calling dcupdateplanesandstream separately for stream and its phantom stream causes a NULL pointer...

Linux Distros Unpatched Vulnerability : CVE-2026-97516

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: rtw88: Add NULL check for chip-edccath in rtwfwadaptivityresult It was recently reported that rtwfwadaptivityresult in fw.c dereferences rtwdev-chip-edcca...

Linux Distros Unpatched Vulnerability : CVE-2026-93273

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - regulator: tps6594: Fix device node reference leaks in multiphase loop In tps6594regulatorprobe, the multi-phase configuration loop calls offindnodebyname to fi...

Linux Distros Unpatched Vulnerability : CVE-2026-97519

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/xe: Fix null pointer dereference in devcoredump cleanup In xedevcoredumpsnapshotfree, ss-gt may be NULL when the snapshot was never fully populated e.g., wh...

PT-2026-98065

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference occurs when the dc update planes and stream function is called separately for a stream and its associated phantom stream. This happens because the phantom stre...

PT-2026-98121

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference exists in the mmc davinci irq function within the Linux kernel. The issue occurs because the function only returns early when both host-cmd and host-data are...

PT-2026-104928

In the Linux kernel, the following vulnerability has been resolved: mmc: davinci: avoid NULL deref of host-data in IRQ handler mmc davinci irq returns early only when both host-cmd and host-data are NULL: if host-cmd == NULL && host-data == NULL ... return IRQ NONE; So we may legitimately reach t...

PT-2026-104989

In the Linux kernel, the following vulnerability has been resolved: ACPICA: Fix NULL pointer dereference in acpi ns custom package acpi ns custom package unconditionally dereferences the first element of the package to read the BIX version number, without checking for NULL: if Elements-Common.Typ...

PT-2026-98125

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A null-pointer dereference can occur in the crypto: ixp4xx component. The chainup buffers function, which creates a linked list of buffer descriptors for a scatterlist, fails to handle...

PT-2026-104879

In the Linux kernel, the following vulnerability has been resolved: ALSA: es18xx: check control allocation before private data setup snd es18xx mixer creates controls with snd ctl new1 and then stores bookkeeping pointers or sets private free before calling snd ctl add. snd ctl new1 can return NU...

PT-2026-98025

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference occurs in the spi get device match data function when spi get device id returns NULL. This situation can arise when using driver override without a matching SP...

EUVD-2026-86314

libde265 commit 4d45a6b contains a NULL pointer dereference vulnerability in the NAL parsing path. When de265pushNAL is called with a zero-length NAL unit, the resulting NALunit may retain a NULL backing buffer, which is subsequently passed as the destination argument to memcpy in NALunit::setdat...

CVE-2026-88373

libde265 commit 4d45a6b contains a NULL pointer dereference vulnerability in the NAL parsing path. When de265pushNAL is called with a zero-length NAL unit, the resulting NALunit may retain a NULL backing buffer, which is subsequently passed as the destination argument to memcpy in NALunit::setdat...

CVE-2026-97414: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ASoC: mediatek: mt8365-afe-pcm: fix possible NULL-pointer dereferences in mt8365afesuspend mt8365afesuspend allocates the register backup buffer with devmkcalloc, but does not check for allocation failure before using the returne...

PT-2026-98050

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description Running a btrfs balance operation can trigger a null-pointer dereference when metadata corruption causes a chunk in the chunk tree to exist without a corresponding block group in the...

PT-2026-104859

In the Linux kernel, the following vulnerability has been resolved: btrfs: balance: fix potential bg lookup failure in btrfs may alloc data chunk BUG Running btrfs balance can trigger a null-ptr-deref before relocating a data chunk when metadata corruption leaves a chunk in the chunk tree without...

Linux Distros Unpatched Vulnerability : CVE-2026-97506

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - crypto: ixp4xx - fix buffer chain unwind on allocation failure chainupbuffers builds a linked list of buffer descriptors for a scatterlist. If dmapoolalloc fail...