SUSE CVE-2026-68261

In the Linux kernel, the following vulnerability has been resolved: drm/imagination: fix error checking of pvrvmcontextlookup Since pvrvmcontextlookup returns either NULL or a pointer, then stop using ISERR for checking the return value. Using ISERR leads to the kernel oops reported below. It can...

SUSE CVE-2026-68272

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: validate CPGFXSHADOW chunk size in CS pass1 Add a minimum-length check for the AMDGPUCHUNKIDCPGFXSHADOW chunk in amdgpucspass1, matching the gate already present for the IB, FENCE and BOHANDLES chunk types. The...

SUSE CVE-2026-68273

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix context pstate override handling There are several problems in the context pstate handling code. The most serious ones are potential use-after-free and NULL pointer dereferences at context initialization time. Bot...

SUSE CVE-2026-68275

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: check amdgpuvmbofind result in GETMAPPINGINFO The AMDGPUGEMOPGETMAPPINGINFO path of amdgpugemopioctl looks up the bova for the buffer object in the caller's VM via amdgpuvmbofind, but uses the returned pointer without...

SUSE CVE-2026-68305

In the Linux kernel, the following vulnerability has been resolved: drm/xe/vf: Add drmdev guards when detaching CCS read/write buffers CCS read/write buffers are freed during BO destruction. In some cases, BOs may be destroyed after the device is unbound but while the DRM structure remains valid,...

SUSE CVE-2026-68306

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7996: fix possible NULL-pointer deref in mt7996mcustabfereht mt76connacgetehtphycap routine can theoretically return NULL so check cap pointer before dereferencing it...

SUSE CVE-2026-68308

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7996: check pointer returned by mt76connacgethephycap mt76connacgethephycap routine can theoretically return NULL so check cap pointer before dereferencing it...

SUSE CVE-2026-68309

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: connac: fix possible NULL-pointer deref in mt76connacmcuunibsshetlv mt76connacgethephycap routine can theoretically return NULL so check cap pointer before dereferencing it...

SUSE CVE-2026-68362

In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: fix NULL pointer dereference in ath11khalsrngaccessbegin In ATH11KQMIEVENTFWREADY, ATH11KFLAGREGISTERED is set unconditionally even when ath11kcoreqmifirmwareready fails. This leaves the driver in an inconsistent...

Linux Kernel Security Vulnerabilities

The Linux kernel has a security vulnerability. This vulnerability stems from TCP/IPv6 incorrectly not limiting the MSS when the MTU is large. As a result, gsosize may be set to 0xFFFF, and it might be misinterpreted as GSOBYFRAGS. This can lead to a null pointer derefrence exception...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.11 contains security vulnerabilities. These vulnerabilities stem from the capablewrtmount function, which fails to properly handle detached mount points, leading to null pointer dereferencing and potentially causing the kernel to crash...

Linux Kernel Security Vulnerabilities

The Linux kernel has a security vulnerability. This vulnerability stems from the fact that the qederxbuildskb and qedetparxbuildskb functions do not perform a NULL check when qedebuildskb returns NULL. This leads to additional consumption by the BD ring, potentially damaging the DMA page referenc...

CLSA-2026-1786710499 libyang: Fix of CVE-2023-26917

CVE-2023-26917: fix NULL pointer dereference in lyspstmtvalidatevalue on a missing YANG statement argument...

CLSA-2026-1786708350 openjpeg2: Fix of 2 CVEs

CVE-2025-50952: fix NULL pointer dereference in opjdwtdecodetile - CVE-2023-39327: fix uncontrolled resource consumption when EPH markers are declared but missing...

Oracle Linux 10 : kernel (ELSA-2026-36956)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-36956 advisory. - crypto: ccp - copy IV using skcipher ivsize CKI Backport Bot RHEL-188463 CVE-2026-53016 - futex/requeue: Revert 'Prevent NULL pointer dereference i...

Linux core/sock.c DoS

The vulnerability in the core/sock.c component of the Linux operating system’s kernel is related to pointer dereferencing errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

Linux kernel DoS

The vulnerability in the net/sctp/smstatefuns.c component of the Linux kernel is related to dereferencing errors. Exploitation of this vulnerability may allow an attacker to cause a denial of service...

Linux kernel DoS

The vulnerability in the drivers/net/bonding/bondmain.c component of the Linux kernel is related to dereferencing errors. Exploitation of this vulnerability may allow an attacker to cause a denial of service...

Use of Uninitialized Resource

Overview Affected versions of this package are vulnerable to Use of Uninitialized Resource in the daemon process. An attacker can cause the service to crash by sending a specially crafted file list where the first entry is a dot entry not typed as a directory, leading to a null pointer dereferenc...

CVE-2026-35590

A flaw was found in libvips. The EXIF decoder did not properly verify the range of EXIF tag groups, which could lead to a null pointer dereference. A local user could exploit this by providing specially crafted EXIF data, causing the application to crash and resulting in a denial of service...