CVE-2026-91782

A flaw was found in GNU Binutils. A local attacker could exploit a null pointer dereference in the elfx86allocatedynrelocs function. This vulnerability could lead to a Denial of Service DoS condition, making the affected system or application unavailable...

CVE-2026-91780

A flaw was found in GNU Binutils. A local attacker can trigger a null pointer dereference by manipulating input to the 'elflinkaddobjectsymbols' function. This can lead to a denial of service DoS condition, making the affected component unavailable...

CVE-2026-98522

A flaw was found in the Linux kernel's Imagination PowerVR GPU driver. This vulnerability allows a local user to cause a Denial of Service DoS by crashing the system. The issue occurs when the driver fails to properly return an error code after a memory mapping failure, allowing execution to...

CVE-2026-98523

A flaw was found in the Linux kernel's Direct Rendering Manager DRM subsystem. A local user can cause a Denial of Service DoS by closing a DRM device file descriptor associated with a partially initialized client. Because the kernel fails to properly unregister an incomplete framebuffer client...

CVE-2026-98455

A flaw was found in the Linux kernel's Bluetooth Radio Frequency Communication RFCOMM subsystem. This vulnerability allows a local user to cause a Denial of Service DoS by crashing the system. By querying connection options on a socket whose connection was disconnected while deferred setup remain...

CVE-2026-12155

IBM MQ could allow an authenticated attacker to cause a denial of service by sending specially crafted multicast status messages that trigger a NULL pointer dereference...

EUVD-2026-104469

IBM MQ could allow an authenticated attacker to cause a denial of service by sending specially crafted multicast status messages that trigger a NULL pointer dereference...

CVE-2026-12155

The IBM MQ software is susceptible to a denial of service vulnerability due to the deserialization of untrusted data . An authenticated attacker can trigger a NULL pointer dereference by sending specially crafted multicast status messages. No specific details regarding affected versions, remediat...

CVE-2026-12155 IBM MQ Deserialization of Untrusted Data

IBM MQ could allow an authenticated attacker to cause a denial of service by sending specially crafted multicast status messages that trigger a NULL pointer dereference...

CVE-2026-12155 IBM MQ Deserialization of Untrusted Data

IBM MQ could allow an authenticated attacker to cause a denial of service by sending specially crafted multicast status messages that trigger a NULL pointer dereference...

CLSA-2026-1780516677 kernel: Fix of 135 CVEs

atm: lec: fix use-after-free in sockdefreadable CVE-2026-43050 - ALSA: usb-audio: Use the right limit for PCM OOB check - ALSA: usb-audio: Prevent excessive number of frames CVE-2026-23208 - xen/privcmd: fix double free via VMA splitting CVE-2026-31787 - cpufreq: governor: fix double free in...

Advantech Adam-3600 security vulnerability

The Advantech Adam-3600 versions prior to 2.8.5.0 have security vulnerabilities. These vulnerabilities stem from a null pointer dereferencing in the ondisconnected callback function of the license manager service. This could allow unauthenticated attackers to cause the service to crash...

HarfBuzz: Improper exception handling vulnerability

The HarfBuzz version 8.0.0 to 14.6.0 has a vulnerability related to improper exception handling. This vulnerability arises from experimental WebAssembly shaper hosts that import buffersetcontents, facecreate, and fontsetcoords functions. Null pointer dereferencing occurs in these functions,...

CLSA-2026-1781347338 kernel: Fix of 92 CVEs

octeontx2-pf: handle otx2mboxgetrsp errors in cn10k.c CVE-2024-56726 - octeontx2-pf: handle otx2mboxgetrsp errors in otx2common.c CVE-2024-56679 - USB: chipidea: fix memory leak with using debugfslookup CVE-2023-53334 - drivers: serial: jsm: fix some leaks in probe CVE-2022-50312 - drm: amd:...

CLSA-2024-1722003515 openldap: Fix of 2 CVEs

CVE-2023-2953: added check for strdup failure, to avoid null pointer dereference...

CLSA-2026-1791132991 Fix of 400 CVEs

CVE-2026-53266 - netfilter: bridge: make ebtsnat ARP rewrite writable CVE-2026-53266 CVE-2025-39964 - crypto: afalg - Disallow concurrent writes in afalgsendmsg CVE-2025-39964 CVE-2025-39827 - net: rose: include node references in roseneigh refcount CVE-2025-39827 CVE-2026-93140 - udf: Mark LVID...

CLSA-2026-1786444011 kernel: Fix of 16 CVEs

KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level CVE-2026-63807 - KVM: x86: Check for invalid/obsolete root after making MMU pages available CVE-2026-64561 - comedi: vmk80xx: fix bulk-buffer overflow CVE-2021-47474 - staging: vmeuser: Fix possible UAF in...

CVE-2026-98510

A flaw was found in the Linux kernel's Intel Xe graphics driver. When closing a GPU virtual memory space, page tables were destroyed before contested virtual memory areas were properly unlinked from shared buffer objects. A concurrent thread evicting a shared buffer object can attempt to access t...

CLSA-2026-1783790425 kernel: Fix of 41 CVEs

ima: don't clear IMADIGSIG flag when setting or removing non-IMA xattr CVE-2025-68183 - futex/requeue: Prevent NULL pointer dereference in removewaiter on self-deadlock CVE-2026-53166 - rtmutex: Use waiter::task instead of current in removewaiter CVE-2026-43499 - net: bonding: fix use-after-free...

CVE-2026-98508

A flaw was found in the Linux kernel's VirtIO GPU driver. This flaw allows a local user to cause a denial of service DoS by triggering a kernel crash. Under memory pressure, the driver fails to verify whether fence memory allocation succeeds during graphics command submission, leading to an...