CLEANSTART-2026-PD89526 Issue summary: PBMAC1 parameters in PKCS#12 files are missing validation which can trigger a stack-based buffer overflow, invalid pointer or NULL pointer dereference during MAC verification

Security vulnerability affects the apache-superset package. Issue summary: PBMAC1 parameters in PKCS12 files are missing validation which can trigger a stack-based buffer overflow, invalid pointer or NULL pointer dereference during MAC verification...

CLEANSTART-2026-FN35430 Issue summary: Processing a malformed PKCS#12 file can trigger a NULL pointer dereference in the PKCS12_item_decrypt_d2i_ex() function

Security vulnerability affects the apache-superset package. Issue summary: Processing a malformed PKCS12 file can trigger a NULL pointer dereference in the PKCS12itemdecryptd2iex function...

CVE-2026-98064

A flaw was found in the Linux kernel. A local user can cause a Denial of Service DoS and crash the system by running a specially crafted BPF Berkeley Packet Filter program. The issue occurs within the BPF Type Format BTF component when attempting to display data referencing a void data type, whic...

CVE-2026-98063

A flaw was found in the Linux kernel's BPF Berkeley Packet Filter subsystem. When formatting data using BPF Type Format BTF, the kernel attempts to access type identifiers without checking if they are initialized. A local user with permissions to execute BPF programs can exploit this vulnerabilit...

CVE-2026-98059

A flaw was found in the Linux kernel's BPF Berkeley Packet Filter subsystem. This issue allows a local attacker to cause a Denial of Service DoS through a system crash. The vulnerability occurs because the BPF verifier fails to recognize that process-wait tracepoint arguments can be null,...

CVE-2026-18746

parsewriteop in subsys/net/lib/lwm2m/lwm2mmessagehandling.c handles inbound CoAP WRITE/CREATE requests that carry a Block1 option. For the first block of a transfer it called initblockctx and then immediately stored the peer-selected block size with blockctx-ctx.blocksize = blocksize before...

CVE-2026-95390: NULL Pointer Dereference

PEAK CAN TRC file parser crash in 4.6.0 to 4.6.8 allows denial of service...

CVE-2026-102808: NULL Pointer Dereference

PX4 Autopilot through 1.17.0 contains a NULL pointer dereference vulnerability in the sdstress command where the -b byte count parameter is parsed without validation before being passed to malloc and memset. Attackers with shell access, including through MAVLink, can supply invalid byte count...

CVE-2026-102723: NULL Pointer Dereference

NULL Pointer Dereference on MSRP Attribute Table Exhaustion...

Linux Distros Unpatched Vulnerability : CVE-2026-100890

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw has been found in Trusted Domain Project OpenDMARC up to 1.4.2. Affected by this vulnerability is the function opendmarcspfipv6explode in the library...

Amazon Linux 2 : gstreamer1-plugins-base (ALAS-2026-3930)

The version of gstreamer1-plugins-base installed on the remote host is prior to 1.18.4-5. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2026-3930 advisory. A NULL pointer dereference flaw was found in GStreamer's RTSP support library. The vulnerability occurs while...

CVE-2026-102724: NULL Pointer Dereference

NULL Pointer Dereference When Evicting the Sole MSRP Attribute...

CVE-2026-102623: NULL Pointer Dereference

A flaw was found in KubeVirt. An authenticated user with permission to create Virtual Machine Instances VMIs can cause a Denial of Service DoS by submitting a virtual machine definition with an empty ephemeral volume. The virt-controller component fails to properly validate the volume...

Important: gstreamer1-plugins-base

Issue Overview: A NULL pointer dereference flaw was found in GStreamer's RTSP support library. The vulnerability occurs while parsing an Authorization or WWW-Authenticate header that uses Digest authentication. Specially crafted whitespace placement around a parameter's terminator can cause an...

CVE-2026-75805: NULL Pointer Dereference

Issue summary: A CMP client that requests certificate revocation on the basis of a PKCS10 CSR may dereference a NULL pointer and terminate abnormally when processing a crafted revocation response. Impact summary: The NULL pointer dereference happens on a read which leads to a crash and a Denial o...

CVE-2026-75805: NULL Pointer Dereference

Issue summary: A CMP client that requests certificate revocation on the basis of a PKCS10 CSR may dereference a NULL pointer and terminate abnormally when processing a crafted revocation response. Impact summary: The NULL pointer dereference happens on a read which leads to a crash and a Denial o...

CVE-2026-18746: NULL Pointer Dereference

parsewriteop in subsys/net/lib/lwm2m/lwm2mmessagehandling.c handles inbound CoAP WRITE/CREATE requests that carry a Block1 option. For the first block of a transfer it called initblockctx and then immediately stored the peer-selected block size with blockctx-ctx.blocksize = blocksize before...

UBUNTU-CVE-2026-75805

Issue summary: A CMP client that requests certificate revocation on the basis of a PKCS10 CSR may dereference a NULL pointer and terminate abnormally when processing a crafted revocation response. Impact summary: The NULL pointer dereference happens on a read which leads to a crash and a Denial o...

NULL Pointer Dereference in CMP Client Revocation Response Handling

Issue summary: A CMP client that requests certificate revocation on the basis of a PKCS10 CSR may dereference a NULL pointer and terminate abnormally when processing a crafted revocation response. Impact summary: The NULL pointer dereference happens on a read which leads to a crash and a Denial o...

ROS-20260929-73-0173

The vulnerability of the e1000tbishouldaccept function in the drivers/net/ethernet/intel/e1000/e1000main.c file of the Intel Ethernet network adapter driver for the Linux operating system is related to the use of a NULL pointer dereferencing. Exploiting this vulnerability could allow an attacker ...