EUVD-2026-51331

An incomplete fix for CVE-2026-15352 in the NASA core Flight System cFS Health and Safety HS application leaves a separate NULL pointer dereference reachable in versions through 7.0.1. An attacker who can trigger the affected command under specific conditions could cause the HS application to...

Qnap QTS and QuTS hero NULL Pointer Dereference (CVE-2026-24716)

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to launch a denial-of-service DoS attack. We have already fixed the vulnerability in the...

Qnap QuTS hero NULL Pointer Dereference (CVE-2025-62850)

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to launch a denial-of-service DoS attack. We have already fixed the vulnerability in the...

Qnap QTS and QuTS hero NULL Pointer Dereference (CVE-2025-66281)

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. The remote attackers can then exploit the vulnerability to launch a denial-of-service DoS attack. We have already fixed the vulnerability in the following versions: QTS 5.2.9.3410 build...

CVE-2026-18064

An incomplete fix for CVE-2026-15352 in the NASA core Flight System cFS Health and Safety HS application leaves a separate NULL pointer dereference reachable in versions through 7.0.1. An attacker who can trigger the affected command under specific conditions could cause the HS application to...

CVE-2026-18064 NASA Core Flight System (cFS) Health & Safety (HS) Application NULL Pointer Dereference

An incomplete fix for CVE-2026-15352 in the NASA core Flight System cFS Health and Safety HS application leaves a separate NULL pointer dereference reachable in versions through 7.0.1. An attacker who can trigger the affected command under specific conditions could cause the HS application to...

CVE-2026-18064

CVE-2026-18064 affects NASA’s core Flight System (cFS) Health and Safety (HS) application. The issue is an incomplete fix for CVE-2026-15352, leaving a separate NULL pointer dereference exploitable in HS versions up to and including 7.0.1. A successful trigger of the affected command under specif...

CVE-2026-18064 NASA Core Flight System (cFS) Health & Safety (HS) Application NULL Pointer Dereference

An incomplete fix for CVE-2026-15352 in the NASA core Flight System cFS Health and Safety HS application leaves a separate NULL pointer dereference reachable in versions through 7.0.1. An attacker who can trigger the affected command under specific conditions could cause the HS application to...

RLSA-2026:47040 Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: xfrm: Duplicate SPI Handling CVE-2025-39797 kernel: lib/buildid: use kernelread for sleepable context CVE-2026-23002 kernel: futex: Drop CLONETHREAD requirement for private default hash...

openjdk: OpenJDK: Enhance AWT ImagingLib (Oracle CPU 2026-07)

A flaw was found in OpenJDK. When the software processes certain images, a specific function fails to manage memory boundaries correctly. This can lead to the application attempting to access invalid memory or dereference a null pointer, which may cause the application to unexpectedly terminate...

SUSE CVE-2026-62432

The EVTCHNOPexpandarray hypercall checks for whether FIFO event channels are enabled, but without holding the correct lock. It can race with EVTCHNOPreset, resulting in dereferencing a NULL pointer...

CVE-2026-64258

A flaw was found in the fuse-uring component of the Linux kernel. When a copy operation to the userspace ring buffer fails, a request can be terminated improperly, leading to a NULL pointer dereference. This vulnerability could allow a local attacker to cause a system crash, resulting in a Denial...

CVE-2026-64489

A flaw was found in the ALSA Advanced Linux Sound Architecture ymfpci driver in the Linux kernel. This vulnerability occurs because the 'sndctlnew1' function, which allocates memory, may return a null value if memory allocation fails. The driver then attempts to use this null value without proper...

CVE-2026-64416

A flaw was found in the Linux kernel's memory management subsystem, specifically within the swap cgroup functionality. When a system is configured without swap, a corrupted page table entry PTE can lead to a null pointer dereference during process exit. This vulnerability allows a local attacker ...

PT-2026-66616

An incomplete fix for CVE-2026-15352 in the NASA core Flight System cFS Health and Safety HS application leaves a separate NULL pointer dereference reachable in versions through 7.0.1. An attacker who can trigger the affected command under specific conditions could cause the HS application to...

CVE-2026-64484

A flaw was found in the Linux kernel's ALSA Advanced Linux Sound Architecture es1938 sound driver. This vulnerability arises when a memory allocation failure causes the sndctlnew1 function to return a null value. The sndes1938mixer function then attempts to use this null value without proper...

CVE-2026-64480

A flaw was found in the Linux kernel's Advanced Linux Sound Architecture ALSA ice1712 driver. This vulnerability occurs because the sndctlnew1 function, which allocates memory, can return a null value upon failure, but the driver does not properly check for this. An attacker could potentially...

CVE-2026-64405

A flaw was found in the Linux kernel's Bluetooth subsystem, specifically within the hciconn module. This vulnerability occurs when the hciabortconn function attempts to process a pending connection while a critical pointer is unexpectedly null. This can lead to a null pointer dereference, causing...

CVE-2026-64486

A flaw was found in the Linux kernel's Advanced Linux Sound Architecture ALSA cmipci component. This vulnerability occurs because the sndcmipcispdifcontrols function fails to check the return value of sndctlnew1, which can return a null pointer if memory allocation fails. A local attacker could...

CVE-2026-64295

A flaw was found in the Linux kernel's memory management mm component, specifically within the pageext iteration application programming interface API. When memory is dynamically added to the system a process known as 'hotplugging', the API does not properly validate memory page frame numbers PFN...