CVE-2026-68454

In the Linux kernel, the following vulnerability has been resolved: KVM: s390: pci: Fix handling of AIF enable without AISB When a guest seeks to register IRQs without a summary bit specified, ensure that the associated GAITE then stores 0 for the guest AISB location instead of...

UBUNTU-CVE-2026-29036

cJSON versions 1.5.0 through 1.7.19 contain an incorrectly-resolved name or reference vulnerability in the decodepointerinplace function within cJSONUtils.c that allows unauthenticated attackers to cause JSON Patch operations to target wrong object keys by supplying crafted JSON Pointer escape...

The vulnerability of the bpf component in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the bpf component in the Linux operating system’s kernel is related to pointer arithmetic errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the mac80211/ocb.c component in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the mac80211/ocb.c component in the Linux operating system is related to improper handling of the absence of a specific element. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the drivers/gpu/host1x components of the Linux operating system, which allows a hacker to trigger a service failure

The vulnerability of the drivers/gpu/host1x components of the Linux operating system is related to errors during the update of the link counters. Exploiting this vulnerability can allow an attacker to cause a service failure...

Linux Distros Unpatched Vulnerability : CVE-2026-29036

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - cJSON versions 1.5.0 through 1.7.19 contain an incorrectly-resolved name or reference vulnerability in the decodepointerinplace function within cJSONUtils.c tha...

The vulnerability of the drivers/spi/spi-tegra210-quad.c component of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the drivers/spi/spi-tegra210-quad.c component in the Linux operating system is related to the dereferencing of a pointer with an expired lifetime. Exploiting this vulnerability can allow an attacker to cause a service failure...

PT-2026-71659

rsync 3.0.0 before 3.5.0 contains a null pointer dereference vulnerability in the daemon child process that allows remote attackers to crash the daemon by sending a file list whose first entry is a dot entry not typed as a directory. The daemon dereferences the first file list entry as a director...

CVE-2026-68334

A flaw was found in the Linux kernel's rxrpc component. A race condition in the rxrpcwakeupiothread function could lead to a null pointer dereference. This occurs when the iothread pointer is checked and then reloaded, and if the I/O thread exits between these operations, the second load can resu...

EUVD-2026-57598

kin-openapi is a Go project for handling OpenAPI files. Prior to 0.144.0, ValidationHandler.Load in openapi3filter/validationhandler.go silently replaces a nil AuthenticationFunc with NoopAuthenticationFunc, which returns nil without checking credentials. This substitution causes every OpenAPI...

GHSA-97FP-2VW9-Q5JG vulnerabilities

Vulnerabilities for packages: libssh...

JLSEC-2026-1268 Cap'n Proto and its Rust implementation vulnerable to out-of-bounds read due to logic error handling list-of-list

The Cap'n Proto library and capnp Rust package are vulnerable to out-of-bounds read due to logic error handling list-of-list. If a message consumer expects data of type "list of pointers", and if the consumer performs certain specific actions on such data, then a message producer can cause the...

CVE-2026-68434

A flaw was found in the Linux kernel's 8250mid serial driver. This vulnerability occurs due to missing NULL checks before calling setup and exit callbacks, which can result in a NULL pointer dereference. A local attacker could exploit this flaw to cause a kernel oops, leading to a Denial of Servi...

CVE-2026-68439

A flaw was found in the Linux kernel's Wi-Fi driver for the mt7925 component. This vulnerability arises from a potential NULL-pointer dereference within the mt7925mcubsshetlv function. If the mt76connacgethephycap routine returns a null value, it is not properly checked before being used, which...

CVE-2026-68435

A flaw was found in the Linux kernel, specifically within the LoongArch architecture's kexec command line lookup functionality. A local attacker could exploit this by using the kexecload system call, which incorrectly passes a user-space segment buffer to a kernel function without proper...

CVE-2026-68444

A flaw was found in the Linux kernel's armffa firmware component. A local attacker or malicious process could exploit this vulnerability by providing a NULL argument to the ffapartitioninfoget function. This missing NULL check leads to a NULL pointer dereference, causing a kernel panic and...

firefox: thunderbird: Invalid pointer in the DOM: Bindings (WebIDL) component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Invalid pointer in the DOM: Bindings WebIDL component...

firefox: thunderbird: Invalid pointer in the JavaScript: WebAssembly component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: We are aware that exploit code for this is public however we are not aware of any attacks in the wild abusing this flaw...

Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP5 kernel was updated to fix various security issues: The following security issues were fixed: CVE-2026-31450: ext4: publish jinode after initialization bsc1262618. CVE-2026-31510: Bluetooth: L2CAP: Fix null-ptr-deref on l2capsockreadycb bsc1262603. CVE-2026-31624:...

SUSE-SU-2026:3594-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP5 kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2026-31450: ext4: publish jinode after initialization bsc1262618. - CVE-2026-31510: Bluetooth: L2CAP: Fix null-ptr-deref on l2capsockreadycb bsc1262603. -...