SUSE-SU-2026:23501-1 Security update for libusb-1_0

This update for libusb-10 fixes the following issues: - CVE-2026-23679: NULL pointer dereference in parseinterface allows attackers to crash applications by supplying a malformed USB configuration descriptor bsc1266664. - CVE-2026-47104: one-byte out-of-bounds read in parseiadarray allows attacke...

OPENSUSE-SU-2026:21783-1 Security update for libusb-1_0

This update for libusb-10 fixes the following issues: - CVE-2026-23679: NULL pointer dereference in parseinterface allows attackers to crash applications by supplying a malformed USB configuration descriptor bsc1266664. - CVE-2026-47104: one-byte out-of-bounds read in parseiadarray allows attacke...

CVE-2026-70459

A flaw was found in rsync. A remote attacker could send a specially crafted file list to the rsync daemon. This could lead to a null pointer dereference, causing the daemon to crash and resulting in a Denial of Service DoS. Mitigation To mitigate this issue, restrict network access to the rsync...

Security update for openssl-3-livepatches

This update for openssl-3-livepatches fixes the following issues: CVE-2026-14457: RPK server signature algorithm selection can dereference a missing certificate bsc1275145, bsc1274792. CVE-2026-63072: heap buffer overflow in CMS key unwrapping bsc1275133, bsc1274788. CVE-2026-63076: invalid point...

CVE-2026-18453: NULL Pointer Dereference

A flaw was found in 389 Directory Server. A missing NULL pointer check in the paged results handling of opsharedsearch allows an unauthenticated remote attacker to crash the LDAP server by sending a crafted sequence of search requests using the USEONEBACKEND control, resulting in denial of servic...

PT-2026-89674

Name of the Vulnerable Software and Affected Versions strongSwan versions 4.1.10 through 6.0.7 Description A NULL pointer dereference occurs in the eap-aka plugin. A NULL pointer dereference is a condition where a program attempts to read or write to a memory address that is NULL, typically leadi...

PT-2026-89677

Name of the Vulnerable Software and Affected Versions strongSwan versions 4.2.0 through 6.0.7 Description A NULL pointer dereference exists in the x509 plugin's attribute certificate parser. This issue is network exploitable and requires no authentication, potentially leading to a Denial of Servi...

Linux Distros Unpatched Vulnerability : CVE-2026-80816

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ALSA: FCP: Use a private URB for the notification endpoint fcpinitnotify used mixer-urb, which sndusbmixerstatuscreate allocates for the optional UAC2 status...

Linux Distros Unpatched Vulnerability : CVE-2026-80813

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nvmet: fix NULL pointer dereference in nvmetexecuteidentifynslist When a host issues an Identify command with CNS 07h Active Namespace ID List for a specific I/...

Debian dsa-6487 : charon-cmd - security update

The remote Debian 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6487 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6487-1 [email protected] https://www.debian.org/securit...

libxml2: libxml2: Denial of Service due to NULL pointer dereference in xmlRegNewParserCtxt

A NULL pointer dereference in libxml2's xmlRegNewParserCtxt function allows a local attacker to cause a denial of service DoS. The flaw occurs when strlen is called on an unverified pointer following a failed xmlStrdup memory allocation, resulting in a process crash...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053271)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053271 advisory. In the Linux kernel, the following vulnerability has been resolved: ipvs: fix ipv4 null-ptr-deref in route error path The IPv4 code path in ipvsgetoutrt calls...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053425)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053425 advisory. In the Linux kernel, the following vulnerability has been resolved: drm: vc4: Fix possible null pointer dereference In vc4hdmiaudioinit ofgetaddress may return NULL...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053415)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053415 advisory. In the Linux kernel, the following vulnerability has been resolved: ASoC: fsl-asoc-card: set priv-pdev before using it priv-pdev pointer was set after being used in...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053417)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053417 advisory. In the Linux kernel, the following vulnerability has been resolved: nouveau: fix instmem race condition around ptr stores Running a lot of VK CTS in parallel against...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053230)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053230 advisory. In the Linux kernel, the following vulnerability has been resolved: mmc: mmcspi: fix error handling in mmcspiprobe If mmcaddhost fails, it doesn't need to call...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053291)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053291 advisory. In the Linux kernel, the following vulnerability has been resolved: liquidio: Adjust a NULL pointer handling path in liovfrepcopypacket In liovfrepcopypacket...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053311)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053311 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: dwc2: fix possible NULL pointer dereference caused by driver concurrency In...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053259)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053259 advisory. In the Linux kernel, the following vulnerability has been resolved: clk: mediatek: clk-mt6797: Add check for mtkallocclkdata Add the check for the return value of...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-105454)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-105454 advisory. In the Linux kernel, the following vulnerability has been resolved: gtp: fix a potential NULL pointer dereference When sockfdlookup fails, gtpencapenablesocket retur...