79200 matches found
PT-2026-61199
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer bug exists in the svm range set attr function within the drm/amdkfd component. This occurs when a user calls kfd ioctl svm without first calling kfd ioctl acquire vm,...
PT-2026-61433
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference occurs in the Linux kernel when processing an IOAM Hop-by-Hop option. The function ipv6 hop ioam accesses in6 dev getskb-dev-cnf.ioam6 enabled without validati...
PT-2026-61500
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists where ACPI PRM calls are delegated to a workqueue running in a kernel thread to detect and mitigate faulting memory accesses by firmware. Because these PRM accesses can...
Linux Distros Unpatched Vulnerability : CVE-2026-63822
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: ath11k: fix warning when unbinding If there is an error during some initialization related to firmware, the buffers dp-txringi.txstatus are released...
PT-2026-61321
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the net/iucv component when recvmsg is called simultaneously with getsockoptSO MSGSIZE. An AF IUCV HIPER user can trigger a NULL pointer dereference because th...
PT-2026-61451
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ALSA PCM data transfer process where the iov iter setup is incorrectly applied during silencing when data is NULL. This leads to the calculation of a bogus iov ite...
PT-2026-61096
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference exists in the Linux kernel within the NFSv4/pNFS implementation. The function nfs4 decode mp ds addr decodes r netid and r addr opaques from a GETDEVICEINFO...
CVE-2025-71391
SurrealDB versions before 2.2.2 contain an uncaught exception vulnerability in the net module that allows authenticated users to crash the database. Attackers can send crafted HTTP queries containing null bytes to the /sql endpoint, causing an unhandled exception that crashes the SurrealDB instan...
CVE-2025-71391 SurrealDB before 2.2.2 Denial of Service via /sql endpoint
SurrealDB versions before 2.2.2 contain an uncaught exception vulnerability in the net module that allows authenticated users to crash the database. Attackers can send crafted HTTP queries containing null bytes to the /sql endpoint, causing an unhandled exception that crashes the SurrealDB instan...
CVE-2025-71391 SurrealDB before 2.2.2 Denial of Service via /sql endpoint
SurrealDB versions before 2.2.2 contain an uncaught exception vulnerability in the net module that allows authenticated users to crash the database. Attackers can send crafted HTTP queries containing null bytes to the /sql endpoint, causing an unhandled exception that crashes the SurrealDB instan...
CVE-2025-71391
SurrealDB versions before 2.2.2 contain an uncaught exception vulnerability in the net module that allows authenticated users to crash the database. Attackers can send crafted HTTP queries containing null bytes to the /sql endpoint, causing an unhandled exception that crashes the SurrealDB instan...
EUVD-2025-210491
SurrealDB versions before 2.2.2 contain an uncaught exception vulnerability in the net module that allows authenticated users to crash the database. Attackers can send crafted HTTP queries containing null bytes to the /sql endpoint, causing an unhandled exception that crashes the SurrealDB instan...
CVE-2025-71391
Technical details for CVE-2025-71391 are not publicly available in the provided documents. Monitor for updates, as affected versions, root cause, and fixes are not disclosed here.
CVE-2025-71391 SurrealDB before 2.2.2 Denial of Service via /sql endpoint
SurrealDB versions before 2.2.2 contain an uncaught exception vulnerability in the net module that allows authenticated users to crash the database. Attackers can send crafted HTTP queries containing null bytes to the /sql endpoint, causing an unhandled exception that crashes the SurrealDB instan...
Oracle Linux 10 : httpd (ELSA-2026-21433)
The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-21433 advisory. - Resolves: RHEL-186221 - httpd: Apache HTTP Server: Heap-based Buffer Overflow via malicious backend servers CVE-2026-34356 - Resolves: RHEL-186195 ...
CVE-2026-49852
joserfc is a Python library that provides an implementation of several JSON Object Signing and Encryption JOSE standards. Prior to 1.6.8, joserfc.jwt.decode accepts attacker-forged HMAC-signed tokens when the caller-supplied verification key is the empty string or None, because HMACAlgorithm.sign...
EUVD-2026-45281
joserfc is a Python library that provides an implementation of several JSON Object Signing and Encryption JOSE standards. Prior to 1.6.8, joserfc.jwt.decode accepts attacker-forged HMAC-signed tokens when the caller-supplied verification key is the empty string or None, because HMACAlgorithm.sign...
kernel: futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock
A flaw was found in the Linux kernel's futex Fast Userspace Mutex requeue mechanism. When a non-top waiter attempts to requeue a Priority Inheritance PI futex it already owns, a NULL pointer dereference can occur. This issue, specifically within the removewaiter function during a self-deadlock...
CVE-2026-8075
Mattermost Desktop App versions =6.2 5.5.13 6.0.2.0 fail to properly null check when checking for headers in the Mattermost Desktop App which allows any user to crash another channel members Desktop App via posting a malicious link with an embedded image that misses one of those headers. Mattermo...
EUVD-2026-45157
Mattermost Desktop App versions =6.2 5.5.13 6.0.2.0 fail to properly null check when checking for headers in the Mattermost Desktop App which allows any user to crash another channel members Desktop App via posting a malicious link with an embedded image that misses one of those headers. Mattermo...