CVE-2026-80678

A flaw was found in the Linux kernel's i2c: imx driver. A race condition during I2C slave registration and error handling could lead to a NULL pointer dereference. This occurs when the i2cimx-slave pointer is not properly cleared or assigned, especially if power management operations fail or if t...

CVE-2026-80621

A flaw was found in the Linux kernel's PCI DesignWare Cores DWC driver. When the controller lacks RAS DES capability, the dwcpcierasdesdebugfsinit function can incorrectly report success, leaving a pointer uninitialized. During debugfs teardown, the dwcpcierasdesdebugfsdeinit function then attemp...

CVE-2026-80655

A flaw was found in the Linux kernel's zynqmppower driver. A race condition during event registration could allow a local attacker to trigger a system crash. This occurs because certain work structures are registered before they are properly allocated and initialized. If firmware triggers an even...

CVE-2026-80689

A flaw was found in the Linux kernel's mmiotrace component. When the mmiotracearray is not initialized or is disabled, invoking mmiotracerw or mmiotracemapping can lead to a NULL pointer dereference. This can cause a system crash, resulting in a Denial of Service DoS. Mitigation Mitigation for th...

CVE-2026-80664

A flaw was found in the Linux kernel's netfilter component, specifically within the xtnat SNAT and DNAT target handlers. These handlers incorrectly assume the presence of an IP-family connection tracking state. A local attacker, by instantiating these handlers from an unsupported family, such as ...

CVE-2026-80697

A flaw was found in the Linux kernel's erofs filesystem. An invalid fpath for page cache sharing could lead to a null pointer dereference when a mincore operation is performed. This vulnerability could allow a local attacker to cause a system crash, resulting in a Denial of Service DoS. Mitigatio...

CVE-2026-80677

A flaw was found in the Linux kernel driver core. The devhassyncstate function reads the dev-driver pointer multiple times without proper synchronization. This allows a concurrent unbind operation to clear the dev-driver pointer between reads. Such a race condition could lead to a null pointer...

EUVD-2026-68291

A vulnerability was identified in Open5GS up to 2.7.7. This issue affects some unknown processing of the file src/amf/namf-handler.c of the component Transfer Endpoint. Such manipulation leads to null pointer dereference. The attack can be launched remotely. Upgrading to version 2.8.0 is capable ...

CVE-2026-82821: NULL Pointer Dereference

A vulnerability was determined in FLVMeta up to 1.2.2. Affected by this vulnerability is the function amfobjectget of the file src/amf.c of the component AMF Object Parsing. This manipulation causes null pointer dereference. The attack may be initiated remotely. The exploit has been publicly...

CVE-2026-82803: NULL Pointer Dereference

A vulnerability has been found in armink struct2json 1.0. This affects the function S2JSTRUCTGETstringELEMENT in the library struct2json/inc/s2jdef.h of the component JSON Deserialization. The manipulation of the argument valuestring leads to null pointer dereference. The attack may be initiated...

Important: freerdp

Issue Overview: FreeRDP before 3.28.0 treats lines beginning with forward slash in RDP files as raw command-line options, exposing the entire CLI parser surface to untrusted files. Attackers can craft malicious RDP files with /rdp2tcp, /cert:ignore, or /drive options to execute arbitrary commands...

Important: freerdp

Issue Overview: FreeRDP before 3.28.0 treats lines beginning with forward slash in RDP files as raw command-line options, exposing the entire CLI parser surface to untrusted files. Attackers can craft malicious RDP files with /rdp2tcp, /cert:ignore, or /drive options to execute arbitrary commands...

PT-2026-83882

Name of the Vulnerable Software and Affected Versions armink struct2json version 1.0 Description An issue exists in the JSON Deserialization component within the library struct2json/inc/s2jdef.h. A remote attacker can cause a null pointer dereference—a condition where the software attempts to rea...

ALSA-2026:61241 Moderate: pipewire security update

PipeWire is a multimedia server for Linux and other Unix like operating systems. Security Fixes: pipewire: RAOP RTSP NULL Deref CVE-2026-14324 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE pages...

Linux Distros Unpatched Vulnerability : CVE-2026-26449

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Stomper 5e2741e when a client sends a SEND frame missing the destination header field, the server triggers a null pointer dereference or access to invalid...

Linux Distros Unpatched Vulnerability : CVE-2026-80690

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - scsi: ufs: core: Initialize hba-rpmbs list in ufshcd Initialize the hba-rpmbs list in ufshcdallochost to prevent NULL pointer dereference in the device teardown...

Amazon Linux 2 : freerdp (ALAS-2026-3887)

The version of freerdp installed on the remote host is prior to 2.11.7-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3887 advisory. FreeRDP before 3.28.0 treats lines beginning with forward slash in RDP files as raw command-line options, exposing the...

Linux Distros Unpatched Vulnerability : CVE-2026-82821

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was determined in FLVMeta up to 1.2.2. Affected by this vulnerability is the function amfobjectget of the file src/amf.c of the component AMF...

Linux Distros Unpatched Vulnerability : CVE-2026-38344

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A NULL pointer dereference in the getminbuffersize function /libswscale/slice.c of FFmpeg N-122528-gdd2976b9e1 allows attackers to cause a Denial of Service DoS...

PT-2026-83957

A vulnerability was determined in FLVMeta up to 1.2.2. Affected by this vulnerability is the function amf object get of the file src/amf.c of the component AMF Object Parsing. This manipulation causes null pointer dereference. The attack may be initiated remotely. The exploit has been publicly...