HID: alps: fix NULL pointer dereference in alps_raw_event()

...

nilfs2: fix NULL i_assoc_inode dereference in nilfs_mdt_save_to_shadow_map

...

mmc: vub300: fix NULL-deref on disconnect

...

media: vidtv: fix NULL pointer dereference in vidtv_channel_pmt_match_sections

...

ALSA: usx2y: us144mkii: fix NULL deref on missing interface 0

...

Unity Linux 20.1060a Security Update: kernel (UTSA-2026-014345)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-014345 advisory. In the Linux kernel, the following vulnerability has been resolved: cpufreq: amd-pstate: add check for cpufreqcpuget's return value cpufreqcpuget may return NULL. To...

Unity Linux 20.1060a Security Update: kernel (UTSA-2026-014355)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-014355 advisory. In the Linux kernel, the following vulnerability has been resolved: backlight: hx8357: Fix potential NULL pointer dereference The im pins are optional. Add missing...

Unity Linux 20.1060a Security Update: kernel (UTSA-2026-014326)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-014326 advisory. In the Linux kernel, the following vulnerability has been resolved: mmc: sunplus: fix return value check of mmcaddhost mmcaddhost may return error, if we ignore its...

Unity Linux 20.1060a Security Update: kernel (UTSA-2026-014351)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-014351 advisory. In the Linux kernel, the following vulnerability has been resolved: HID: amdsfh: Fix potential NULL pointer dereference devmaddactionorreset can suddenly invoke...

Unity Linux 20.1060a Security Update: kernel (UTSA-2026-014346)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-014346 advisory. In the Linux kernel, the following vulnerability has been resolved: reset: uniphier-glue: Fix possible null-ptr-deref It will cause null-ptr-deref when resourcesizer...

Unity Linux 20.1060a Security Update: kernel (UTSA-2026-014328)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-014328 advisory. In the Linux kernel, the following vulnerability has been resolved: rpmsg: glink: Add check for kstrdup Add check for the return value of kstrdup and return the erro...

Unity Linux 20.1060a Security Update: kernel (UTSA-2026-014348)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-014348 advisory. In the Linux kernel, the following vulnerability has been resolved: cppccpufreq: Fix possible null pointer dereference cppccpufreqgetrate and hisicppccpufreqgetrate...

Unity Linux 20.1060a Security Update: kernel (UTSA-2026-014357)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-014357 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: misc: brcmstb-usb-pinmap: check return value after calling platformgetresource It will cause...

Note Mark: OIDC-registered users authenticated by submitting password "null"

Summary IsPasswordMatch in backend/db/models.go falls back to a hard-coded bcrypt"null" placeholder whenever a user has no stored password. OIDC-registered users are created with an empty password, so anyone who submits password: "null" to the internal login endpoint receives a valid session for...

Improper Authentication

Overview Affected versions of this package are vulnerable to Improper Authentication via the IsPasswordMatch function. An attacker can gain unauthorized access to accounts registered through OIDC by submitting the password "null" to the internal login endpoint, which results in a valid session...

GHSA-PXF8-6WQM-R6HH Note Mark: OIDC-registered users authenticated by submitting password "null"

Summary IsPasswordMatch in backend/db/models.go falls back to a hard-coded bcrypt"null" placeholder whenever a user has no stored password. OIDC-registered users are created with an empty password, so anyone who submits password: "null" to the internal login endpoint receives a valid session for...

OESA-2026-2098 fio security update

fio is a tool used to spawn many threads or processes that perform a specific type of io operation specified by the user.It accepts many global parameters inherited by threads.Its common method is to simulate jobs that match the specified io load. Security Fixes: A NULL pointer dereference...

OESA-2026-2097 fio security update

fio is a tool used to spawn many threads or processes that perform a specific type of io operation specified by the user.It accepts many global parameters inherited by threads.Its common method is to simulate jobs that match the specified io load. Security Fixes: A NULL pointer dereference...

OESA-2026-2099 fio security update

fio is a tool used to spawn many threads or processes that perform a specific type of io operation specified by the user.It accepts many global parameters inherited by threads.Its common method is to simulate jobs that match the specified io load. Security Fixes: A NULL pointer dereference...

OESA-2026-2095 fio security update

fio is a tool used to spawn many threads or processes that perform a specific type of io operation specified by the user.It accepts many global parameters inherited by threads.Its common method is to simulate jobs that match the specified io load. Security Fixes: A NULL pointer dereference...