ROS-20260821-73-0040

The vulnerability of the nulltimeoutrq function in the Linux operating system’s kernel is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to trigger a service failure...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-102070)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-102070 advisory. In the Linux kernel, the following vulnerability has been resolved: net: bridge: use a stable FDB dst snapshot in RCU readers Local FDB entries can be rewritten in...

ROS-20260821-73-0027

The vulnerability of the iscsiswtcpconnsetparam function in the drivers/scsi/iscsitcp.c file of the Linux SCSI device driver is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

ROS-20260821-73-0003

The vulnerability of the mvpp2ethtoolgetrxnfc function in the Linux operating system is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-102097)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-102097 advisory. In the Linux kernel, the following vulnerability has been resolved: slip: reject VJ receive packets on instances with no rstate array slhcinit accepts rslots == 0 a...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-102078)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-102078 advisory. In the Linux kernel, the following vulnerability has been resolved: pmdomain: core: Fix detach procedure for virtual devices in genpd If a device is attached to a PM...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-102035)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-102035 advisory. In the Linux kernel, the following vulnerability has been resolved: net/sched: clsfw: fix NULL pointer dereference on shared blocks The old-method path in fwclassify...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-102095)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-102095 advisory. In the Linux kernel, the following vulnerability has been resolved: bpf: Enforce expectedattachtype for tailcall compatibility Yinhao et al. recently reported: Our...

ROS-20260821-73-0057

The vulnerability of the hugetlbfsfillsuper function in the Linux operating system’s memory management subsystem is related to the assignment of the zero pointer. Exploiting this vulnerability can allow an attacker to cause a service failure or increase their privileges...

MINI-29G5-V7G6-8HGG

Bulletin has no description...

CVE-2026-74435

A flaw was found in the rxrpc subsystem of the Linux kernel. This vulnerability occurs when the rxrpcverifydata function fails to allocate a necessary buffer if the incoming data length is zero. An attacker could exploit this by sending specially crafted network packets, leading to a NULL pointer...

CVE-2026-74430

A flaw was found in the Linux kernel's rxrpc component. A remote attacker could send a specially crafted ACKALL packet that bypasses state validation. This improper handling of forged packets can lead to a null-pointer dereference, causing a Denial of Service DoS by crashing the system. Mitigatio...

CVE-2026-74424

A flaw was found in the Linux kernel. The fbcon component, responsible for framebuffer console operations, can encounter a NULL pointer dereference. This occurs when fbconnewmodelist attempts to access console data vcdata that has been freed, leading to a system crash. A local attacker could...

CVE-2026-74400

A flaw was found in the Linux kernel. The BPF Berkeley Packet Filter kfuncs bpfsetdentryxattr and bpfremovedentryxattr do not properly check for a null inode when handling negative dentries. This oversight can lead to a null pointer dereference. Additionally, warnings in bpfxattrreadpermission an...

CVE-2026-74395

A flaw was found in the RDMA/mlx5 component of the Linux kernel. During the devx subscribe-event unwind process, a null pointer dereference can occur if eventfdctxfdget fails. This issue arises because eventsub is linked into sublist before its fields are properly initialized, leading to an attem...

CVE-2026-74418

A flaw was found in the dma-fence subsystem of the Linux kernel. This vulnerability allows for a null pointer dereference in tracepoint functions, such as tracedmafencesignaled, tracedmafencewaitend, and tracedmafencedestroy, after a fence operation has been signaled and its internal pointers...

CVE-2026-74407

A flaw was found in the Linux kernel's ath11k Wi-Fi driver. A race condition exists between the system's reboot or shutdown process and the WLAN firmware crash recovery SSR mechanism. This race condition can lead to a NULL pointer dereference, causing the kernel to crash and resulting in a Denial...

CVE-2026-17165

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to a NULL pointer dereference...

CVE-2026-17009

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to cause a denial of service due to a NULL pointer dereference...

CVE-2026-17165

CVE-2026-17165 affects IBM AIX 7.2, 7.3 and IBM PowerVM VIOS 4.1 . A remote, unauthenticated attacker can trigger a NULL pointer dereference to cause a denial of service . The CVSS 3.1 score is 7.5 (HIGH) with a network attack vector, low complexity, and no required privileges or user interaction...