CVE-2026-97439: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: preserve non-DOS attribute bits in system.dosattrib BUG A corrupted ntfs3 image can hit a NULL function pointer call in genericperformwrite after toggling system.ntfsattrib and then overwriting system.dosattrib on the...

CVE-2026-97431

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Avoid DPMS-on for phantom stream Why & How Calling dcupdateplanesandstream separately for stream and its phantom stream causes a NULL pointer dereference, since the phantom is destroyed on the first call. Skip th...

CVE-2026-93236

In the Linux kernel, the following vulnerability has been resolved: media: meson: vdec: fix NULL pointer deref in vdectryfmtcommon When VIDIOCTRYFMT is called with an unsupported pixel format on the OUTPUT queue, vdectryfmtcommon falls back to V4L2PIXFMTMPEG2. However, if a distro has locally...

CVE-2026-93236: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: media: meson: vdec: fix NULL pointer deref in vdectryfmtcommon When VIDIOCTRYFMT is called with an unsupported pixel format on the OUTPUT queue, vdectryfmtcommon falls back to V4L2PIXFMTMPEG2. However, if a distro has locally...

PT-2026-104935

In the Linux kernel, the following vulnerability has been resolved: tty: serial: 8250: protect against NULL uart-port.dev in register serial8250 register 8250 port conditionally copies uart-port.dev from up-port.dev only when up-port.dev is non-NULL: if up-port.dev uart-port.dev = up-port.dev;...

PT-2026-97877

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the SMB client DFS cache where the get tgt name function returns an error pointer when the ce-tgthint variable is NULL. Additionally, the dfs cache noreq update tgthin...

PT-2026-97948

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference exists in the lock set class function. This occurs because register lock class can return NULL if the lock class pool is exhausted, graph lock fails, or key...

PT-2026-97879

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A null pointer dereference exists in the nfsd file net dispose function. During per-net teardown, the nn-nfsd serv pointer is cleared before the filecache laundrette is shut down. This...

PT-2026-97903

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference occurs in the vdec try fmt common function when VIDIOC TRY FMT is called with an unsupported pixel format on the OUTPUT queue. The system attempts to fall back...

PT-2026-97934

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference exists in the Bluetooth management component. The uuid count member of the discovery state structure is accessed and modified without proper locking, creating ...

PT-2026-97961

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A null pointer dereference occurs in the bcm2835 pinctrl probe function when devm pinctrl register fails. In this scenario, the system attempts to call gpiochip remove before gpiochip ad...

Linux Distros Unpatched Vulnerability : CVE-2026-93273

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - regulator: tps6594: Fix device node reference leaks in multiphase loop In tps6594regulatorprobe, the multi-phase configuration loop calls offindnodebyname to fi...

CVE-2026-88373

libde265 commit 4d45a6b contains a NULL pointer dereference vulnerability in the NAL parsing path. When de265pushNAL is called with a zero-length NAL unit, the resulting NALunit may retain a NULL backing buffer, which is subsequently passed as the destination argument to memcpy in NALunit::setdat...

Linux Distros Unpatched Vulnerability : CVE-2026-97516

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: rtw88: Add NULL check for chip-edccath in rtwfwadaptivityresult It was recently reported that rtwfwadaptivityresult in fw.c dereferences rtwdev-chip-edcca...

Linux Distros Unpatched Vulnerability : CVE-2026-97431

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/amd/display: Avoid DPMS-on for phantom stream Why & How Calling dcupdateplanesandstream separately for stream and its phantom stream causes a NULL pointer...

CVE-2026-97484

In the Linux kernel, the following vulnerability has been resolved: usbip: vhcihcd: fix NULL deref in statusshowvhci platformgetdrvdata can return NULL if a VHCI host controller's probe failed e.g. due to USB bus number exhaustion. statusshowvhci checked for a NULL pdev but not for a NULL hcd...

CVE-2026-97484: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: usbip: vhcihcd: fix NULL deref in statusshowvhci platformgetdrvdata can return NULL if a VHCI host controller's probe failed e.g. due to USB bus number exhaustion. statusshowvhci checked for a NULL pdev but not for a NULL hcd...

PT-2026-105007

In the Linux kernel, the following vulnerability has been resolved: usbip: vhci hcd: fix NULL deref in status show vhci platform get drvdata can return NULL if a VHCI host controller's probe failed e.g. due to USB bus number exhaustion. status show vhci checked for a NULL pdev but not for a NULL...

PT-2026-98135

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference exists in the rtw fw adaptivity result function within fw.c of the rtw88 wifi driver. The issue occurs because devices using the 8821CE chip do not define the...

CVE-2026-97446

In the Linux kernel, the following vulnerability has been resolved: ACPICA: Fix NULL pointer dereference in acpinscustompackage acpinscustompackage unconditionally dereferences the first element of the package to read the BIX version number, without checking for NULL: if Elements-Common.Type !=...