GoBGP 代码问题漏洞

GoBGP is an open-source implementation of the Border Gateway Protocol BGP developed by osrg. Version 4.3.0 of GoBGP contains a code vulnerability that arises from a null pointer dereferencing during the processing of malformed BGP UPDATE messages containing unrecognized Well-known path attributes...

Tor 代码问题漏洞

Tor is a virtual tunnel network operated by the Tor Project organization. It allows individuals and groups to enhance their privacy and security on the Internet. Versions of Tor prior to 0.4.9.7 contained a code vulnerability caused by a null pointer dereferencing when the CERT unit received data...

Linux Distros Unpatched Vulnerability : CVE-2026-43282

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: RDMA/ionic: Fix potential NULL pointer dereference in ionicqueryport The function...

Linux Distros Unpatched Vulnerability : CVE-2026-44602

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Tor before 0.4.9.7 has a NULL pointer dereference when a CERT cell is received out of order, aka TROVE-2026-006. CVE-2026-44602 Note that Nessus relies on the...

PT-2026-38343

Name of the Vulnerable Software and Affected Versions MongoDB Server versions prior to 8.2.7 Description An authenticated user can cause a denial of service by crashing the mongod process. This occurs when running $rankFusion or $scoreFusion with an empty pipeline on a view. During view resolutio...

CLSA-2026-1778111838 httpd: Fix of 9 CVEs

CVE-2026-24072: fix modrewrite apexpr privilege escalation in htaccess - CVE-2026-28780: fix modproxyajp ajpmsgcheckheader buffer over-read - CVE-2026-29169: fix moddavlock NULL pointer dereference - CVE-2026-33006: fix modauthdigest timing attack - CVE-2026-33007: fix modauthnsocache NULL...

CVE-2026-43251

A flaw was found in the Linux kernel's Human Interface Device HID prodikeys driver. A local attacker can exploit this vulnerability by connecting a specially crafted Universal Serial Bus USB device. This device can send a malicious report descriptor, bypassing a necessary check and causing a null...

CLSA-2026-1777942724 vim: Fix of 3 CVEs

CVE-2021-3928: fix reading uninitialized memory in spell suggestions spellsuggest.c - CVE-2022-1616: fix buffer overflow in invalid command with composing chars exdocmd.c - CVE-2022-1620: fix NULL pointer dereference when using invalid pattern buffer.c...

CVE-2026-43207

A flaw was found in the Linux kernel's mtk-mdp media driver. Improper error handling in the probe function could lead to a resource leak. Additionally, a missing check for the return value of vpugetplatdevice could result in a null pointer dereference, potentially causing a system crash and leadi...

CVE-2026-43189

A flaw was found in the v4l2-async component of the Linux kernel. Improper error handling during asynchronous video device matching can lead to a null pointer dereference. This issue could allow a local attacker to trigger a system crash, resulting in a Denial of Service DoS...

CVE-2026-43173

A flaw was found in the Linux kernel. A local user can trigger a NULL pointer dereference in the ixp4xxgettsinfo function within the network ethernet xscale driver. This occurs because ixp46xptpfind is unconditionally called, even on systems that do not support the ixp46x PTP feature. Successful...

CVE-2026-43164

A flaw was found in the Linux kernel's UDP-Lite User Datagram Protocol-Lite implementation. An issue during the initialization of UDP-Lite sockets can lead to a null-pointer dereference in the udpenqueuescheduleskb function. This vulnerability could allow an attacker to trigger a system crash,...

CVE-2026-43160

A flaw was found in the Linux kernel's macsmc driver. This vulnerability occurs because a mutex, a mechanism used to prevent simultaneous access to shared resources, within the struct applesmc is not properly initialized in the applesmcprobe function. An uninitialized mutex can lead to occasional...

CVE-2026-43159

A flaw was found in the rtl8723bs Wi-Fi driver within the Linux kernel. This vulnerability occurs when a pointer, pwlan, can become null before being used in the rtwfreenetworknolock function, leading to a null pointer dereference. An attacker could potentially exploit this to cause a system cras...

CVE-2026-43152

A flaw was found in the Linux kernel's Human Interface Device HID subsystem, specifically within the hid-pl module. This vulnerability arises from improper error handling during device initialization. An attacker could potentially trigger a NULL pointer dereference by interacting with a device th...

CVE-2026-43148

A flaw was found in the Linux kernel. This vulnerability occurs in the powerpc/smp component due to a missing check for memory allocation failure. Specifically, if the kcalloc function fails to allocate memory within parsethreadgroups, a subsequent operation can attempt to use a NULL pointer. Thi...

CVE-2026-43137

A flaw was found in the Linux kernel's Advanced Linux Sound Architecture on Chip ASoC Sound Open Firmware SOF Intel High Definition Audio HDA subsystem. This flaw occurs when there is a mismatch between the Digital Audio Interface DAI links in the machine driver and the audio topology, leading to...

CVE-2026-43131

A flaw was found in the Linux kernel. When the System Management Unit SMU is disabled during Reliability, Availability, and Serviceability RAS initialization, a null pointer dereference occurs within the drm/amd/pm module. This issue can lead to a system crash, resulting in a Denial of Service Do...

CVE-2026-43123

A flaw was found in the fbcon component of the Linux kernel. A local user could exploit a missing return value check in the con2fbacquirenewinfo function. This oversight can lead to a null pointer dereference, potentially causing a system crash and resulting in a Denial of Service DoS...

CVE-2026-43122

A flaw was found in the Linux kernel's Advanced Configuration and Power Interface ACPI cpuidle driver. Due to an update in the acpiprocessorstart function, a NULL pointer dereference can occur if acpiprocessorpowerinit is called without a cpuidle driver. This vulnerability could allow a local...