CVE-2026-90066 samples/ftrace: Fix kthread_stop() on ERR_PTR in ftrace-direct-multi-modify

In the Linux kernel, the following vulnerability has been resolved: samples/ftrace: Fix kthreadstop on ERRPTR in ftrace-direct-multi-modify ftracedirectmultiinit assigns kthreadrun's return value to simpletsk without an ISERR check. When kthreadrun fails it returns ERRPTR-ENOMEM, but init still...

CVE-2026-76781 Libxml2: libxml2: null pointer dereference parsing nextcatalog without catalog attribute

A flaw was found in libxml2. A local user or an attacker providing a specially crafted XML catalog can trigger a NULL pointer dereference during XML catalog parsing. This occurs when a nextCatalog element lacks its mandatory catalog attribute, leading to the application crashing and causing a...

CVE-2026-76781

CVE-2026-76781 is a NULL pointer dereference in libxml2 's XML catalog parsing. When a nextCatalog element lacks its mandatory catalog attribute, the parser dereferences a NULL pointer, causing the application to crash and resulting in a Denial of Service . The attack vector is local with user in...

CVE-2026-76781 Libxml2: libxml2: null pointer dereference parsing nextcatalog without catalog attribute

A flaw was found in libxml2. A local user or an attacker providing a specially crafted XML catalog can trigger a NULL pointer dereference during XML catalog parsing. This occurs when a nextCatalog element lacks its mandatory catalog attribute, leading to the application crashing and causing a...

EUVD-2026-81679

A flaw was found in libxml2. A local user or an attacker providing a specially crafted XML catalog can trigger a NULL pointer dereference during XML catalog parsing. This occurs when a nextCatalog element lacks its mandatory catalog attribute, leading to the application crashing and causing a...

CVE-2026-76781

A flaw was found in libxml2. A local user or an attacker providing a specially crafted XML catalog can trigger a NULL pointer dereference during XML catalog parsing. This occurs when a nextCatalog element lacks its mandatory catalog attribute, leading to the application crashing and causing a...

CVE-2026-76781 Libxml2: libxml2: null pointer dereference parsing nextcatalog without catalog attribute

A flaw was found in libxml2. A local user or an attacker providing a specially crafted XML catalog can trigger a NULL pointer dereference during XML catalog parsing. This occurs when a nextCatalog element lacks its mandatory catalog attribute, leading to the application crashing and causing a...

CVE-2026-76781

A flaw was found in libxml2. A local user or an attacker providing a specially crafted XML catalog can trigger a NULL pointer dereference during XML catalog parsing. This occurs when a nextCatalog element lacks its mandatory catalog attribute, leading to the application crashing and causing a...

BIT-MONGODB-2026-82055 Null Pointer Dereference in MongoDB Server 2dsphere Index Key Generation Leads to Denial of Service

A security issue exists in MongoDB's 2dsphere index key generation that can cause a server crash due to a null pointer dereference. When a specially crafted GeoJSON document is inserted into a collection with a 2dsphere index, an inconsistency in geometry parsing can leave an internal object in a...

CVE-2026-92413

A flaw was found in Artifex MuPDF. A remote attacker can exploit this vulnerability by executing a manipulation related to PDF Xref Loading, specifically within the pdfopenfilter function. This can lead to a null pointer dereference, which may result in a denial of service DoS condition, making t...

CVE-2026-25261 Untrusted Pointer Dereference in Camera

Memory corruption while processing rear sensor IOCTL calls...

CVE-2026-25261 Untrusted Pointer Dereference in Camera

Memory corruption while processing rear sensor IOCTL calls...

CVE-2026-25261

This vulnerability involves a memory corruption issue caused by an untrusted pointer dereference in the camera system. The flaw occurs specifically while processing rear sensor IOCTL calls . While the documents do not specify the exact affected product or version, the vulnerability could lead to ...

CVE-2025-59607 Untrusted Pointer Dereference in Windows Compute

Memory Corruption when copying large input data exceeds normal allocation limits...

CVE-2025-59607

CVE-2025-59607 is an Untrusted Pointer Dereference vulnerability in Qualcomm Windows Compute , where memory corruption occurs when copying large input data that exceeds normal allocation limits. The flaw is rated HIGH (CVSS 7.8) with a local attack vector, low complexity, and low privileges requi...

CVE-2025-59607 Untrusted Pointer Dereference in Windows Compute

Memory Corruption when copying large input data exceeds normal allocation limits...

PT-2026-94619

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference occurs in the arm mpam module when a user unbinds a Memory System Component MSC after an error interrupt has triggered the mpam disable function. This happens...

CVE-2026-93093: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: firmware: armscmi: Publish channel state before callbacks Transport setup can enable callbacks before the setup routine returns. mailboxchansetup registers the mailbox client with mboxrequestchannel, and the mailbox controller...

PT-2026-94914

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.16 Description An issue exists in the aspeed udc gadget driver where the ast udc probe function allocates a coherent DMA Direct Memory Access buffer to serve as the backing store for endpoint buffers. Because t...

CVE-2026-90115: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: xsk: fix NULL pointer dereference in xskrcv In the xskrcv multi-buffer path, xskbuffalloc is called in a loop without checking its return value. xskbuffcanalloc only counts fill queue entries without validating their addresses, s...