Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-107310)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-107310 advisory. In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: vgic-v2: Check for non-NULL vCPU in vgicv2parseattr vgicv2parseattr is responsible fo...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-107280)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-107280 advisory. In the Linux kernel, the following vulnerability has been resolved: dlm: fix possible lkbresource null dereference This patch fixes a possible null pointer dereferen...

CVE-2026-81005: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ipmi: si: Fix NULL pointer dereference after failed registration trysmiinit allocates newsmi-sism and later calls ipmiregistersmimod, which maps to ipmiaddsmi. During ipmiaddsmi, the upper IPMI message handler obtains the initial...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-107330)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-107330 advisory. In the Linux kernel, the following vulnerability has been resolved: xenbus: Use kref to track req lifetime Marek reported seeing a NULL pointer fault in the...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-107326)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-107326 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths When the HBA is...

AlmaLinux 10 : gstreamer1-plugins-base (ALSA-2026:66460)

The remote AlmaLinux 10 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:66460 advisory. gstreamer1-plugins-base: gstreamer: NULL/invalid-pointer dereference in gstrtspmessageparseauthcredentials when parsing a crafted Digest...

PT-2026-90093

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A crash occurs in the dm-stats component when the allocation of per-cpu data via the dm kvzalloc function fails. In such cases, the system jumps to the out label and executes the dm stat...

PT-2026-90173

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.2.6-1.1 Description Several sysfs show/store handlers call a discipline callback that dereferences the device-private variable, either directly or through the DASD DEFINE ATTR macro. During the execution of the...

PT-2026-90122

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ravb network component where the system may dereference a NULL pointer when querying the index of a PTP Precision Time Protocol clock before the first open...

GPAC multimedia platform Heap Buffer Overflow DoS

The vulnerability of the gfisomgetuserdatacount function in the isomedia/isomread.c file of the multimedia platform GPAC involves the use of a zero pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

UBUNTU-CVE-2026-79590

A NULL pointer dereference vulnerability exists in the Prism parser component of mruby 4.0.0. An attacker can provide a specially crafted Ruby source file that triggers the parser to pass a NULL pointer to nonnull string handling functions, resulting in undefined behavior and application crash...

CVE-2026-79590

A NULL pointer dereference vulnerability exists in the Prism parser component of mruby 4.0.0. An attacker can provide a specially crafted Ruby source file that triggers the parser to pass a NULL pointer to nonnull string handling functions, resulting in undefined behavior and application crash...

DEBIAN-CVE-2026-79590

A NULL pointer dereference vulnerability exists in the Prism parser component of mruby 4.0.0. An attacker can provide a specially crafted Ruby source file that triggers the parser to pass a NULL pointer to nonnull string handling functions, resulting in undefined behavior and application crash...

CVE-2026-79590

A NULL pointer dereference vulnerability exists in the Prism parser component of mruby 4.0.0. An attacker can provide a specially crafted Ruby source file that triggers the parser to pass a NULL pointer to nonnull string handling functions, resulting in undefined behavior and application crash...

Security Bulletin: IBM® Db2® federated server could allow a remote authenticated attacker to cause a denial of service due to a null pointer dereference (CVE-2026-16702)

Summary IBM® Db2® federated server could allow a remote authenticated attacker to cause a denial of service due to a null pointer dereference CVE-2026-16702 Vulnerability Details CVEID:CVE-2026-16702 DESCRIPTION: DB2 for Linux, UNIX and Windows includes DB2 Connect Server could allow a remote...

DEBIAN-CVE-2026-88054

Tesseract is an open source OCR engine. In version 5.5.3 and earlier, Plumbing::DeSerialize in src/lstm/plumbing.cpp rejects excessively large network stacks but accepts a zero-length stack for NTSERIES, NTPARALLEL, or NTREVERSED layers in a crafted .traineddata model. During LSTMRecognizer...

CVE-2026-88054

Tesseract is an open source OCR engine. In version 5.5.3 and earlier, Plumbing::DeSerialize in src/lstm/plumbing.cpp rejects excessively large network stacks but accepts a zero-length stack for NTSERIES, NTPARALLEL, or NTREVERSED layers in a crafted .traineddata model. During LSTMRecognizer...

CVE-2026-88054

Tesseract is an open source OCR engine. In version 5.5.3 and earlier, Plumbing::DeSerialize in src/lstm/plumbing.cpp rejects excessively large network stacks but accepts a zero-length stack for NTSERIES, NTPARALLEL, or NTREVERSED layers in a crafted .traineddata model. During LSTMRecognizer...

CVE-2026-88054 Tesseract: Denial of service via empty-stack dereference in Plumbing/Series at model load

Tesseract is an open source OCR engine. In version 5.5.3 and earlier, Plumbing::DeSerialize in src/lstm/plumbing.cpp rejects excessively large network stacks but accepts a zero-length stack for NTSERIES, NTPARALLEL, or NTREVERSED layers in a crafted .traineddata model. During LSTMRecognizer...

EUVD-2026-75636

Tesseract is an open source OCR engine. In version 5.5.3 and earlier, Plumbing::DeSerialize in src/lstm/plumbing.cpp rejects excessively large network stacks but accepts a zero-length stack for NTSERIES, NTPARALLEL, or NTREVERSED layers in a crafted .traineddata model. During LSTMRecognizer...