Linux Distros Unpatched Vulnerability : CVE-2026-90648

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wasm2c in WebAssembly wabt through 1.0.41 allows sandbox escape in some situations that primarily involve 32-bit platforms, aka a table flip attack. It does not...

FreeBSD : znc -- multiple vulnerabilities (b7ae786a-af80-11f1-9800-641c67a117d8)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the b7ae786a-af80-11f1-9800-641c67a117d8 advisory. ZNC reports: CVE-2026-82373: Use-after-free when unloading modules, triggered by unprivileged...

PT-2026-90983

The MQTT-SN client keepalive handler process ping in subsys/net/lib/mqtt sn/mqtt sn.c removes the gateway record after PINGREQ retries are exhausted. It invoked SYS SLIST PEEK HEAD CONTAINER&client-gateways, gw, next but discarded the result. That macro is a pure expression that does not assign t...

CVE-2026-90782: NULL Pointer Dereference

S2OPC through 1.7.3 contains a null pointer dereference in msgsubscriptionpublishbsallocnotificationmessageitems where a failed allocation for DataChangeNotification is overwritten by a successful allocation for EventNotificationList. Attackers can trigger heap allocation failures on sessions wit...

znc -- multiple vulnerabilities

ZNC reports: CVE-2026-82373: Use-after-free when unloading modules, triggered by unprivileged users. To mitigate, set DenyLoadMod to true. CVE-2026-82374: Null pointer dereference in crypt module, triggered by IRC server. CVE-2020-11022, CVE-2020-11023: Updated the old bundled vulnerable version ...

PT-2026-90857

S2OPC through 1.7.3 contains a null pointer dereference in msg subscription publish bs alloc notification message items where a failed allocation for DataChangeNotification is overwritten by a successful allocation for EventNotificationList. Attackers can trigger heap allocation failures on...

PT-2026-90942

Name of the Vulnerable Software and Affected Versions GPAC versions prior to abi-16.23 Description A null pointer dereference occurs in the MP4Box component within the gf node list add child function located in the scenegraph/base scenegraph.c file. This issue can be triggered by a local attacker...

CVE-2026-90576: NULL Pointer Dereference

A security vulnerability has been detected in GPAC up to f1219cde. Affected is the function gfnodelistaddchild of the file scenegraph/basescenegraph.c of the component MP4Box. Such manipulation leads to null pointer dereference. The attack can only be performed from a local environment. The explo...

CVE-2026-90573: NULL Pointer Dereference

A vulnerability was identified in GPAC up to f1219cde. The impacted element is the function gfsgmfurldel of the file scenegraph/vrmltools.c of the component MP4Box. The manipulation leads to null pointer dereference. Local access is required to approach this attack. The exploit is publicly...

CVE-2026-90485

A flaw has been found in IOBit Uninstaller 15.5.0.11. Affected by this issue is the function sub11838 of the file IURegistryFilter.sys of the component IOCTL Dispatch Handler. This manipulation causes null pointer dereference. The attack requires local access. The exploit has been published and m...

CVE-2026-90485 IOBit Uninstaller IOCTL Dispatch IURegistryFilter.sys sub_11838 null pointer dereference

A flaw has been found in IOBit Uninstaller 15.5.0.11. Affected by this issue is the function sub11838 of the file IURegistryFilter.sys of the component IOCTL Dispatch Handler. This manipulation causes null pointer dereference. The attack requires local access. The exploit has been published and m...

CVE-2026-90485

A null pointer dereference in the function sub_11838 of the IURegistryFilter.sys driver (IOCTL Dispatch Handler) affects IOBit Uninstaller 15.5.0.11 . A local attacker with low privileges can trigger the flaw without user interaction, resulting in a high-impact denial of service (CVSS 3.1: 5.5 Me...

CVE-2026-90485 IOBit Uninstaller IOCTL Dispatch IURegistryFilter.sys sub_11838 null pointer dereference

A flaw has been found in IOBit Uninstaller 15.5.0.11. Affected by this issue is the function sub11838 of the file IURegistryFilter.sys of the component IOCTL Dispatch Handler. This manipulation causes null pointer dereference. The attack requires local access. The exploit has been published and m...

SUSE CVE-2026-80956

In the Linux kernel, the following vulnerability has been resolved: dm-pcache: only hand out initialized cache segments getcachesegment scans the segment map up to cache-nsegs, the physical device segment count, but cachesegsinit only initializes the first cacheinfo-nsegs segments. A crafted imag...

SUSE CVE-2026-80963

In the Linux kernel, the following vulnerability has been resolved: dm-stats: fix a crash if allocation of per-cpu data fails If "dmkvzallocpercpuallocsize, cputonodecpu" fails, the code jumps to the "out" label and calls dmstatfree. dmstatfree does "foreachpossiblecpucpu...

SUSE CVE-2026-80992

In the Linux kernel, the following vulnerability has been resolved: net: ravb: avoid dereferencing an invalid PTP clock The PTP clock is unavailable before the first open, so querying its index can dereference a NULL pointer. Registration failures can also leave an error pointer in priv-ptp.clock...

SUSE CVE-2026-81005

In the Linux kernel, the following vulnerability has been resolved: ipmi: si: Fix NULL pointer dereference after failed registration trysmiinit allocates newsmi-sism and later calls ipmiregistersmimod, which maps to ipmiaddsmi. During ipmiaddsmi, the upper IPMI message handler obtains the initial...

SUSE CVE-2026-89457

In the Linux kernel, the following vulnerability has been resolved: s390/dasd: Guard sysfs discipline callbacks against unallocated private data Several sysfs show/store handlers call a discipline callback that dereferences device-private, either directly or through the DASDDEFINEATTR macro. Duri...

SUSE CVE-2026-89460

In the Linux kernel, the following vulnerability has been resolved: s390/cpumcf: Handle CPU hotplug via prepare/dead callbacks The command 'perf stat -e cycles -- ' crashes the kernel when CPUs are hotplug added during that run. Root cause is the allocation of struct cpucfevents at first event...

SUSE CVE-2026-89509

In the Linux kernel, the following vulnerability has been resolved: RDMA/ionic: Embed counter driver data in rdmacounter allocation Commit 7e53b31acc7f "RDMA/core: Create and destroy rdmacounter using rdmazallocdrvobj" requires drivers implementing counter ops to embed struct rdmacounter in a...