PT-2026-90892

In the Linux kernel, the following vulnerability has been resolved: Input: psxpad-spi - set driver data before use psxpad spi suspend retrieves the controller state with spi get drvdata, but probe never stores it, so suspend dereferences a NULL pointer. Store it during probe...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-105458)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-105458 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: brnetfilter: fix panic with metadatadst skb Fix a kernel panic in the brnetfilter modu...

Unity Linux 20.1070-8ae / 20.1070e Security Update: kernel (UTSA-2026-105423)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-105423 advisory. In the Linux kernel, the following vulnerability has been resolved: net: sched: cake: fix null pointer access issue when cakeinit fails When the default qdisc is cak...

Linux Distros Unpatched Vulnerability : CVE-2026-85150

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A NULL pointer dereference flaw was found in GStreamer's RTSP support library. The vulnerability occurs while parsing an Authorization or WWW-Authenticate heade...

Unity Linux 20.1070-8ae / 20.1070e Security Update: kernel (UTSA-2026-105425)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-105425 advisory. In the Linux kernel, the following vulnerability has been resolved: cxl: fix possible null-ptr-deref in cxlguestinitafu|adapter If deviceregister fails in...

openssl: NULL pointer dereference in QUIC server initial packet handling

A flaw was found in the OpenSSL QUIC Quick UDP Internet Connections server. A remote attacker could send a specially crafted QUIC initial packet with an invalid token. If the server's address validation is explicitly disabled, this could lead to a NULL pointer dereference, causing the server...

openssl: NULL Pointer Dereference in CRMF EncryptedValue Decryption

A flaw was found in OpenSSL. An attacker controlling a Certificate Management Protocol CMP server, or acting as a man-in-the-middle, could craft a malicious CMP response. This response, containing a Certificate Request Message Format CRMF CertRepMessage with a specific malformed EncryptedValue...

Updated libarchive packages fix security vulnerabilities

Double-free vulnerability in rar5 decompression logic via dangling filteredbuf pointer in initunpack. CVE-2026-14164 Heap overflow oob read while parsing a tar archive contains a pax extended header. CVE-2026-15028 A null pointer dereference vulnerability exists in the acl parser of libarchive...

MGASA-2026-0366 Updated libarchive packages fix security vulnerabilities

Double-free vulnerability in rar5 decompression logic via dangling filteredbuf pointer in initunpack. CVE-2026-14164 Heap overflow oob read while parsing a tar archive contains a pax extended header. CVE-2026-15028 A null pointer dereference vulnerability exists in the acl parser of libarchive...

K000163148: Linux kernel vulnerability CVE-2026-63810

Security Advisory Description In the Linux kernel, the following vulnerability has been resolved: block: Avoid mounting the bdev pseudo-filesystem in userspace The bdev pseudo-filesystem is an internal kernel filesystem with which userspace should not interfere. Unregister it so that userspace...

K000162603: NGINX ngx_http_js_module vulnerability CVE-2026-78222

Security Advisory Description A vulnerability exists in NGINX JavaScript where a malformed HTTP response received by ngx.fetch can cause an NGINX worker to terminate unexpectedly when trusted JavaScript reads Response.statusText. Exploitation requires control or influence over the fetched HTTP...

SUSE CVE-2026-72432

In the Linux kernel, the following vulnerability has been resolved: tpmcrb: Check ACPICOMPANION against NULL during probe Every platform driver can be forced to match a device that doesn't match its list of device IDs because of devicematchdriveroverride, so platform drivers that rely on the...

FreeRDP: FreeRDP: Denial of Service via crafted smartcard cache requests

A flaw was found in FreeRDP. When smartcard emulation is enabled, a remote attacker can send specially crafted smartcard cache requests to a FreeRDP client. This can lead to a null pointer dereference, causing the client process to terminate and disrupting active remote desktop sessions...

openssl: NULL pointer dereference in QUIC server initial packet handling

A flaw was found in the OpenSSL QUIC Quick UDP Internet Connections server. A remote attacker could send a specially crafted QUIC initial packet with an invalid token. If the server's address validation is explicitly disabled, this could lead to a NULL pointer dereference, causing the server...

openssl: NULL Pointer Dereference in CRMF EncryptedValue Decryption

A flaw was found in OpenSSL. An attacker controlling a Certificate Management Protocol CMP server, or acting as a man-in-the-middle, could craft a malicious CMP response. This response, containing a Certificate Request Message Format CRMF CertRepMessage with a specific malformed EncryptedValue...

openssl: NULL pointer dereference in QUIC server initial packet handling

A flaw was found in the OpenSSL QUIC Quick UDP Internet Connections server. A remote attacker could send a specially crafted QUIC initial packet with an invalid token. If the server's address validation is explicitly disabled, this could lead to a NULL pointer dereference, causing the server...

openssl: NULL Pointer Dereference in CRMF EncryptedValue Decryption

A flaw was found in OpenSSL. An attacker controlling a Certificate Management Protocol CMP server, or acting as a man-in-the-middle, could craft a malicious CMP response. This response, containing a Certificate Request Message Format CRMF CertRepMessage with a specific malformed EncryptedValue...

CVE-2026-78222: NULL Pointer Dereference

A vulnerability exists in NGINX JavaScript where a malformed HTTP response received by ngx.fetch can crash an NGINX worker when trusted JavaScript reads Response.statusText. Exploitation requires control or influence over the fetched HTTP response. Impact: This vulnerability may allow remote...

CVE-2026-78222: NULL Pointer Dereference

A vulnerability exists in NGINX JavaScript where a malformed HTTP response received by ngx.fetch can crash an NGINX worker when trusted JavaScript reads Response.statusText. Exploitation requires control or influence over the fetched HTTP response. Impact: This vulnerability may allow remote...

CVE-2018-1000117

creationtimestamp| type| source ---|---|--- 2026-09-01 20:02:51+00:00| seen| Telegram/yngyEw40TVGOGuJmHaN3GRlPpgOSJbqwpKH4VCTtcW0tCfE 2026-09-02 01:03:29+00:00| seen| Telegram/yngyEw40TVGOGuJmHaN3GRlPpgOSJbqwpKH4VCTtcW0tCfE 2026-09-08 20:00:04+00:00| published-proof-of-concept|...