AlmaLinux 9.2 [TuxCare] Security Update: bpftool / kernel / kernel-abi-stablelists / kernel-core / etc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2024:1712570434)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2024:1712570434 advisory. - A use-after-free flaw was found in the Linux kernel's SGI GRU driver in the way the first grufileunlockedioctl function is called ...

AlmaLinux 9.2 [TuxCare] Security Update: vim-X11 / vim-common / vim-enhanced / vim-filesystem / vim-minimal Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1778133583)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1778133583 advisory. - vim is vulnerable to Heap-based Buffer Overflow CVE-2021-3875, CVE-2022-0158 - NULL Pointer Dereference in GitHub repository vim/v...

SUSE CVE-2026-97532

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Null out freed pointers in qla2x00memalloc error path When qla2x00memalloc fails, qla2x00probeone jumps to probehwfailed and calls qla2x00memfree. Several error labels in qla2x00memalloc freed adapter members...

SUSE CVE-2026-97936

In the Linux kernel, the following vulnerability has been resolved: tracing: Fix memory corruption from the histogram stacktrace modifier parsefield sets HISTFIELDFLSTACKTRACE from the ".stacktrace" modifier before it looks the field name up, and nothing afterwards checks that the name resolved t...

SUSE CVE-2026-98098

In the Linux kernel, the following vulnerability has been resolved: tipc: fix NULL deref in tipcnamednodeup on empty publication list User-space applications can bind a large number of service addresses to one or more sockets. Each binding of a local-scope service address inserts one entry...

CVE-2026-86128 Fireware OS NULL Pointer Dereference in NetFlow IPv6 Traffic Processing Allows Remote Denial of Service

A NULL pointer dereference vulnerability in Fireware OS's NetFlow packet-processing feature allows a remote, unauthenticated attacker to cause a denial of service by sending a specially crafted IPv6 packet...

CVE-2026-86128 Fireware OS NULL Pointer Dereference in NetFlow IPv6 Traffic Processing Allows Remote Denial of Service

A NULL pointer dereference vulnerability in Fireware OS's NetFlow packet-processing feature allows a remote, unauthenticated attacker to cause a denial of service by sending a specially crafted IPv6 packet...

CVE-2026-86128

A NULL pointer dereference vulnerability exists in the Fireware OS NetFlow packet-processing feature. This flaw allows a remote, unauthenticated attacker to trigger a denial of service (DoS) by sending a specially crafted IPv6 packet . No specific affected versions, remediation steps, or exploita...

CVE-2026-97947

A flaw was found in the Linux kernel's x86 AMD node component, which may lead to a Denial of Service DoS. If initialization of the AMD System Management Network SMN interface fails, exported read and write functions remain accessible without validating that internal device structures were...

CVE-2026-97927

A flaw was found in the Linux kernel's Unix File System UFS implementation. This vulnerability allows a local user to cause a Denial of Service DoS by mounting a specially crafted or corrupted file system image. During a failed mount operation, an improper cleanup sequence leads to a null pointer...

CVE-2026-97484

A flaw was found in the Linux kernel's USB/IP USB over Internet Protocol Virtual Host Controller Interface VHCI driver. A local user can cause a Denial of Service DoS by reading device status information through sysfs when a host controller fails to initialize. Because the driver does not properl...

CVE-2026-97480

A flaw was found in the Linux kernel's 8250 serial driver. During serial port registration for devices lacking an associated parent device, the driver attempts to access device properties without verifying that the device pointer is valid. This condition leads to a NULL pointer dereference, which...

CVE-2026-97482

A flaw was found in the Linux kernel's gokuudc USB gadget driver. An attacker or event triggering a USB reset interrupt before a gadget driver is bound, or after one is unbound, causes the interrupt handler to access an uninitialized driver pointer while logging the event. This flaw results in a...

CVE-2026-102808

PX4 Autopilot through 1.17.0 contains a NULL pointer dereference vulnerability in the sdstress command where the -b byte count parameter is parsed without validation before being passed to malloc and memset. Attackers with shell access, including through MAVLink, can supply invalid byte count...

CVE-2026-102723

NULL Pointer Dereference on MSRP Attribute Table Exhaustion...

CVE-2026-102724

NULL Pointer Dereference When Evicting the Sole MSRP Attribute...

CVE-2026-102724

NULL Pointer Dereference When Evicting the Sole MSRP Attribute...

EUVD-2026-89190

NULL Pointer Dereference When Evicting the Sole MSRP Attribute...

CVE-2026-102724

NULL Pointer Dereference When Evicting the Sole MSRP Attribute...

CVE-2026-102724

The Eclipse ThreadX networking stack NetX Duo is affected by a NULL Pointer Dereference vulnerability. The issue occurs specifically when the system attempts to evict the sole MSRP attribute . This flaw can lead to a High Availability impact, as indicated by the CVSS 4.0 metrics. While the vulner...