CVE-2026-97601

A flaw was found in the Linux kernel's 6LoWPAN IPv6 over Low-Power Wireless Personal Area Networks networking subsystem, which can lead to a Denial of Service DoS. When a network device changes its link type without properly initializing internal data pointers, the kernel fails to validate the...

CVE-2026-97502

A flaw was found in the Linux kernel's DaVinci MultiMediaCard MMC driver. When processing hardware interrupt events such as read timeouts or communication errors, the driver accesses a data pointer without verifying that an active transfer structure exists. A local user or abnormal device conditi...

CVE-2026-97431

A flaw was found in the Linux kernel's AMD display driver. When updating display streams, the driver improperly handles phantom streams that have already been destroyed, triggering a null pointer dereference. A local attacker can trigger this issue during display power management operations,...

kernel: futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock

A flaw was found in the Linux kernel's futex Fast Userspace Mutex requeue mechanism. When a non-top waiter attempts to requeue a Priority Inheritance PI futex it already owns, a NULL pointer dereference can occur. This issue, specifically within the removewaiter function during a self-deadlock...

CVE-2026-97593

A flaw was found in the Linux kernel's s390 IOMMU Input-Output Memory Management Unit driver. When performing address translation for an unmapped I/O virtual address on systems configured with five-level translation tables, the driver fails to verify whether a region table pointer is valid before...

CVE-2026-97416

A flaw was found in the Linux kernel's Btrfs file system. An attacker could exploit this vulnerability by mounting a corrupted file system image and initiating a balance operation. Due to a missing validation check when querying block group metadata, the kernel triggers a null pointer dereference...

CVE-2026-97418

A flaw was found in the Linux kernel's ALSA Advanced Linux Sound Architecture subsystem within the ESS AudioDrive ES18xx sound card driver. During mixer initialization, the driver fails to verify whether memory allocation for sound control structures succeeds before dereferencing the returned...

CVE-2026-97414

A flaw was found in the Linux kernel's MediaTek audio driver. When suspending the audio device, the driver fails to verify whether memory allocation for the register backup buffer succeeded before accessing it. A local user capable of triggering power management operations during low-memory...

CVE-2026-95390 NULL Pointer Dereference in Wireshark

PEAK CAN TRC file parser crash in 4.6.0 to 4.6.8 allows denial of service...

CVE-2026-95390 NULL Pointer Dereference in Wireshark

PEAK CAN TRC file parser crash in 4.6.0 to 4.6.8 allows denial of service...

CVE-2026-95390 NULL Pointer Dereference in Wireshark

PEAK CAN TRC file parser crash in 4.6.0 to 4.6.8 allows denial of service...

CVE-2026-95390

The Wireshark network protocol analyzer is vulnerable to a NULL pointer dereference in the PEAK CAN TRC file parser . This flaw affects versions 4.6.0 through 4.6.8 and 4.4.19 , allowing an attacker to cause a denial of service (DoS) . To remediate this issue, users should update to the latest ve...

BIT-ENVOY-2026-73547 Envoy ext_authz: request `:path` pseudoheader dereferenced w/o null check

Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.36.10, 1.37.6, 1.38.4, and 1.39.1, Envoy's extauthz filter assumes that a request contains a :path pseudoheader when applying queryparameterstoset or queryparameterstoremove from an authorization...

BIT-ENVOY-2026-48521 Envoy: HTTP/3 connection pool selection null-derefs in ProdClusterManagerFactory::allocateConnPool when transport_socket_options is null

Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.36.10, 1.37.6, 1.38.4, and 1.39.1, Envoy's ProdClusterManagerFactory::allocateConnPool dereferences transportsocketoptions while selecting an HTTP/3 connection pool without first checking whether the...

Multiple vulnerabilities in Pgpool-II

Overview Pgpool-II provided by Pgpool Global Development Group contains multiple vulnerabilities listed below: Out-of-bounds Write CWE-787 - CVE-2026-92867 Improper Certificate Validation CWE-295 - CVE-2026-92868 Out-of-bounds Write CWE-787 - CVE-2026-92869 Stack-based Buffer Overflow CWE-121 -...

CLEANSTART-2026-FN35430 Issue summary: Processing a malformed PKCS#12 file can trigger a NULL pointer dereference in the PKCS12_item_decrypt_d2i_ex() function

Security vulnerability affects the apache-superset package. Issue summary: Processing a malformed PKCS12 file can trigger a NULL pointer dereference in the PKCS12itemdecryptd2iex function...

CLEANSTART-2026-PD89526 Issue summary: PBMAC1 parameters in PKCS#12 files are missing validation which can trigger a stack-based buffer overflow, invalid pointer or NULL pointer dereference during MAC verification

Security vulnerability affects the apache-superset package. Issue summary: PBMAC1 parameters in PKCS12 files are missing validation which can trigger a stack-based buffer overflow, invalid pointer or NULL pointer dereference during MAC verification...

CLEANSTART-2026-JU79609 Issue summary: An invalid or NULL pointer dereference can happen in an application processing a malformed PKCS#12 file

Security vulnerability affects the apache-superset package. Issue summary: An invalid or NULL pointer dereference can happen in an application processing a malformed PKCS12 file...

CVE-2026-98064

A flaw was found in the Linux kernel. A local user can cause a Denial of Service DoS and crash the system by running a specially crafted BPF Berkeley Packet Filter program. The issue occurs within the BPF Type Format BTF component when attempting to display data referencing a void data type, whic...

CVE-2026-98063

A flaw was found in the Linux kernel's BPF Berkeley Packet Filter subsystem. When formatting data using BPF Type Format BTF, the kernel attempts to access type identifiers without checking if they are initialized. A local user with permissions to execute BPF programs can exploit this vulnerabilit...