CVE-2026-53325

The CVE-2026-53325 entry describes a Linux kernel fix for the AMD64 AGP driver (agp_amd64_probe). Root cause: when no AMD northbridges are found, cache_nbs() can return a negative error, but the probe checked for exactly -1, masking the hardware absence and allowing initialization to proceed. Res...

Control Web Panel (CWP) - File Inclusion

In CWP Control Web Panel, previously CentOS Web Panel before version 0.9.8.1107, an unauthenticated attacker can abuse null byte %00 injection with the "scripts" parameter in the /user/loader.php or /user/login.php endpoints to register arbitrary API keys or access sensitive files. This can be...

CVE-2026-10593

The CVE affects Zephyr’s Bluetooth LE Audio BAP unicast client. In unicast_client_ep_qos_state(), the handler writes attacker-controlled QoS fields via stream-qos with only a stream != NULL guard. stream-qos is NULL for streams codec-configured but not yet added to a unicast group, creating a win...

DEBIAN-CVE-2026-53281

In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Avoid NULL pointer dereference or refcount corruption Commit 60f030f7418d "iommu/vt-d: Avoid use of NULL after WARNONONCE" fixed a NULL pointer dereference in an unlikely situation partly. If devpasid is not found in...

CVE-2026-53324

CVE-2026-53324 concerns the Linux kernel, fixing debugfs directory naming for per-device entries in the mana/net subsystem. The root cause was reliance on a hardcoded "0" for PFs and pci_slot_name(pdev->slot) for VFs, which could dereference a NULL pdev->slot for VFs in environments like VF...

EUVD-2026-39859

In the Linux kernel, the following vulnerability has been resolved: net: mana: Use pciname for debugfs directory naming Use pcinamepdev for the per-device debugfs directory instead of hardcoded "0" for PFs and pcislotnamepdev-slot for VFs. The previous approach had two issues: 1. pcislotname...

EUVD-2026-39853

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7925: prevent NULL pointer dereference in mt7925txcheckaggr Move the NULL check for 'sta' before dereferencing it to prevent a possible crash...

CVE-2026-53318

CVE-2026-53318 describes a fix in the Linux kernel’s wireless stack: for mt76/mt7925, a NULL pointer dereference in mt7925_tx_check_aggr() was mitigated by moving the NULL check for the 'sta' pointer before its dereference, preventing a possible crash. The vulnerability affects the mt7925 compone...

EUVD-2026-39851

In the Linux kernel, the following vulnerability has been resolved: drm/amd/ras: Fix NULL deref in rascorerasinterruptdetected Fixes a NULL pointer dereference when rascore is NULL and rascore-dev is accessed in the error path. Reported by: Dan Carpenter...

EUVD-2026-39850

In the Linux kernel, the following vulnerability has been resolved: drm/amd/ras: Fix NULL deref in rascoregetutcsecondtimestamp rascoregetutcsecondtimestamp retrieves the current UTC timestamp in seconds since the Unix epoch through a platform-specific RAS system callback and is used for...

CVE-2026-53315

CVE-2026-53315 affects the Linux kernel code path in drm/amd/ras. The vulnerability arises in ras_core_get_utc_second_timestamp(), which retrieves the current UTC second timestamp via a platform-specific RAS callback. If ras_core is NULL, the function could dereference ras_core->dev, causing a...

CVE-2026-53316

The CVE affects the Linux kernel DRM/AMD ras subsystem. A NULL pointer dereference could occur in ras_core_ras_interrupt_detected when ras_core is NULL and ras_core->dev is accessed in the error path. The issue has been resolved with a fix in the kernel code (details referenced in the advisory...

EUVD-2026-39848

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Avoid NULL dereference in dcdmubsrv error paths In dcdmubsrvlogdiagnosticdata and dcdmubsrvenabledpiatrace. Both functions check: if !dcdmubsrv || !dcdmubsrv-dmub and then call DCLOGERROR inside that block...

CVE-2026-53313

The CVE relates to the Linux kernel DRM/AMD display path. In dc_dmub_srv_log_diagnostic_data() and dc_dmub_srv_enable_dpia_trace(), code path checks meant to guard against null dc_dmub_srv or dc_dmub_srv->dmub incorrectly call DC_LOG_ERROR(), which uses dc_dmub_srv->ctx. If dc_dmub_srv is N...

EUVD-2026-39836

In the Linux kernel, the following vulnerability has been resolved: reset: amlogic: t7: Fix null reset ops Fix missing reset ops causing kernel null pointer dereference. This SOC's reset is currently not used yet...

CVE-2026-53301

The CVE-2026-53301 entry concerns the Linux kernel: a fix for null reset ops in the amlogic t7 reset pathway to prevent a kernel NULL pointer dereference. The issue arises from missing reset ops, with the affected SOC’s reset reportedly not used yet. The connected documents indicate that the reme...

EUVD-2026-39834

In the Linux kernel, the following vulnerability has been resolved: net: airoha: Move ndesc initialization at end of airohaqdmainittx If queue entry list allocation fails in airohaqdmainittxqueue routine, airohaqdmacleanuptxqueue will trigger a NULL pointer dereference accessing the queue entry...

CVE-2026-53299

CVE-2026-53299 concerns the Linux kernel net/airoha driver. The issue arises when queue entry list allocation fails inside airoha_qdma_init_tx_queue; due to an early initialization of ndesc, airoha_qdma_cleanup_tx_queue() may dereference a NULL queue entry array. The fix moves ndesc initializatio...

EUVD-2026-39902

In the Linux kernel, the following vulnerability has been resolved: net: mana: Guard manaremove against double invocation If PM resume fails e.g., manaattach returns an error, manaprobe calls manaremove, which tears down the device and sets gd-gdmacontext = NULL and gd-driverdata = NULL. However,...

CVE-2026-53297

The CVE-2026-53297 issue in the Linux kernel relates to the mana driver path (net: mana) where mana_remove() could be invoked twice: first during mana_probe() teardown and a second time if a resumed PM callback subsequently fails, leading to a NULL dereference when gc == NULL and a kernel panic. ...