Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: crypto: octeontx2 – remove the CONFIGDMCRYPT check No issues were found when using the driver with dm-crypt enabled. Therefore, the CONFIGDMCRYPT check in the driver can be removed. This also fixes the NULL pointer dereference...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: rtc: pl031: Fixed the issue of null pointer dereferencing in RTC features. When there is no interrupt line, the RTC alarm feature is disabled. The clearing of the alarm feature bit was performed before allocating the ldata-rtc...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fixed the publication race in priv-channelstats. The mlx5echannelstatsalloc function publishes a new entry to priv-channelstats, and then increments priv-statsnch as a publication token. However, neither operation...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: ocfs2: Added a NULL check for osb-journal in ocfs2checkpoint inode. During unmount, ocfs2journalshutdown frees the journal and sets osb-journal to NULL. Later, when VFS evicts the remaining cached inodes, the calls to ocfs2evict...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: i2c: imx: Cancel the hrtimer before clearing the slave pointer In i2cimxunregslave, the slave pointer is set to NULL after disabling interrupts. However, a pending interrupt might have already started the hrtimer i2cimxslavetimeo...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: rxrpc: Fixed the handling of ACKALL packets. The rxrpcinputackall function accepts ACKALL packets without checking whether the call is in a state where outstanding transmit buffers exist. Therefore, a forged ACKALL packet can...

openssl: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing

A flaw was found in OpenSSL. A remote attacker could exploit this vulnerability by sending a specially crafted Cryptographic Message Syntax CMS EnvelopedData message. During the processing of a KeyTransportRecipientInfo with RSA-OAEP encryption, the system attempts to access an optional parameter...

Important: Red Hat Security Advisory: openssl security update

An update for openssl is now available for Red Hat Enterprise Linux 7 Extended Lifecycle Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available fo...

EUVD-2026-64672

A vulnerability was determined in ggml-org llama.cpp bec4772f6. This affects the function rpcserver::graphcompute of the file ggml/src/ggml-rpc/ggml-rpc.cpp of the component ggml-RPC Server. Executing a manipulation can lead to null pointer dereference. The attack may be launched remotely. The pu...

K000163041: Linux kernel vulnerability CVE-2026-53403

Security Advisory Description In the Linux kernel, the following vulnerability has been resolved: fbdev: Fix fbnewmodelist to prevent null-ptr-deref in fbvideomodetovar info-var, a framebuffer's current mode, is expected to have a matching entry in info-modelist. vartodisplay relies on this and...

DEBIAN-CVE-2026-78148

A vulnerability was determined in ggml-org llama.cpp bec4772f6. This affects the function rpcserver::graphcompute of the file ggml/src/ggml-rpc/ggml-rpc.cpp of the component ggml-RPC Server. Executing a manipulation can lead to null pointer dereference. The attack may be launched remotely. The pu...

CVE-2026-78148

A vulnerability was determined in ggml-org llama.cpp bec4772f6. This affects the function rpcserver::graphcompute of the file ggml/src/ggml-rpc/ggml-rpc.cpp of the component ggml-RPC Server. Executing a manipulation can lead to null pointer dereference. The attack may be launched remotely. The pu...

PT-2026-80956

Name of the Vulnerable Software and Affected Versions DrayTek VigorSwitch affected versions not specified Description A pre-authentication null pointer dereference occurs in the 'setget.cgi' interface. This issue stems from missing validation when the pass field is absent. A remote attacker can...

PT-2026-80954

Name of the Vulnerable Software and Affected Versions DrayTek VigorSwitch affected versions not specified Description A null pointer dereference occurs in the formlogout function due to missing checks for an empty or absent Cookie header before string handling. A remote attacker with valid...

CVE-2026-71922: NULL Pointer Dereference

Multiple DrayTek VigorSwitch models contain a pre-authentication null pointer dereference vulnerability in the setget.cgi interface. The vulnerability is caused by missing validation when the pass field is absent. A remote attacker can trigger this vulnerability via a crafted request to crash the...

CVE-2026-71920: NULL Pointer Dereference

Multiple DrayTek VigorSwitch models contain a null pointer dereference vulnerability in the formlogout function. The vulnerability is caused by missing checks for an empty or absent Cookie header before string handling. A remote attacker can trigger this vulnerability via a crafted request to cra...

CVE-2026-13213: NULL Pointer Dereference

The Hearing Access Service HAS GATT server in subsys/bluetooth/audio/has.c installs a connection-callback set unconditionally via BTCONNCBDEFINE, so securitychanged runs for every connection that establishes security even before the application has called bthasregister. The service attribute...

CVE-2026-78148: NULL Pointer Dereference

A vulnerability was determined in ggml-org llama.cpp bec4772f6. This affects the function rpcserver::graphcompute of the file ggml/src/ggml-rpc/ggml-rpc.cpp of the component ggml-RPC Server. Executing a manipulation can lead to null pointer dereference. The attack may be launched remotely. The pu...

PT-2026-89726

This update for libarchive fixes the following issues: - Fix creation of temporary files in target directory bsc1254340 - Fix out-of-bounds buffer overrun when using pH LEVEL OFFSET bsc1254341 - Fix buffer overrun in archive le32dec when reading truncated 7zip headers bsc1254342 - Fix NULL pointe...

PT-2026-85364

This update for libarchive fixes the following issues: - Fix creation of temporary files in target directory bsc1254340 - Fix out-of-bounds buffer overrun when using pH LEVEL OFFSET bsc1254341 - Fix buffer overrun in archive le32dec when reading truncated 7zip headers bsc1254342 - Fix NULL pointe...