56959 matches found
SUSE CVE-2026-86141
xmlregexp in libxml2 before 2.15.4 has a NULL pointer dereference in xmlRegNewParserCtxt after a strdup failure, i.e., it does not calculate a string length after NULL checking...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability stems from the ipv6rplsrhrcv function, which does not perform a NULL check on the idev returned by in6devget. When the device’s MTU drops below IPV6MINMTU, addrconfifdown will clear dev-ip6ptr using RCUINITPOINTER. As a result, dat...
Linux Kernel Security Vulnerabilities
The Linux kernel version 6.15 contains security vulnerabilities. These vulnerabilities stem from lifecycle issues with the CXL MCE notifier, which may lead to null pointer dereferencing and reuse of resources after memory management operations...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability stems from the platform/x86 ISST driver, which fails to perform a NULL check on the sstinst, potentially leading to null pointer dereferencing...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability stems from the fact that iommuattachdevicepasid initializes handle-dev only after iommusvalock is released. As a result, the handle bound with the device may return a NULL pointer for the dev pointer. This allows iommusvaunbinddevi...
Linux Kernel Security Vulnerabilities
The Linux kernel version 6.9 contains security vulnerabilities. These vulnerabilities stem from an error in the gssxdecoptionarray path of SUNRPC, where the allocation of oa-data fails, resulting in oa-count being still 1. This leads to a null pointer derefrence by the caller. Additionally, the...
DEBIAN-CVE-2026-45747
Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to version 7.0.16, the Lua TLS certificate information helper could dereference NULL certificate fields when a Lua script requested certificate information for TLS traffic...
CVE-2026-45747
Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to version 7.0.16, the Lua TLS certificate information helper could dereference NULL certificate fields when a Lua script requested certificate information for TLS traffic...
EUVD-2026-75509
Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to version 7.0.16, the Lua TLS certificate information helper could dereference NULL certificate fields when a Lua script requested certificate information for TLS traffic...
CVE-2026-45747
Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to version 7.0.16, the Lua TLS certificate information helper could dereference NULL certificate fields when a Lua script requested certificate information for TLS traffic...
CVE-2026-45747
Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to version 7.0.16, the Lua TLS certificate information helper could dereference NULL certificate fields when a Lua script requested certificate information for TLS traffic...
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP7 RT kernel was updated to fix various security issues: The following security issues were fixed: CVE-2024-57841: net: fix memory leak in tcpconnrequest bsc1235944. CVE-2025-68214: timers: Fix NULL function pointer race in timershutdownsync bsc1255225. CVE-2025-7107...
SUSE-SU-2026:4120-1 Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP7 RT kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2024-57841: net: fix memory leak in tcpconnrequest bsc1235944. - CVE-2025-68214: timers: Fix NULL function pointer race in timershutdownsync bsc1255225. -...
httpd: NULL pointer dereference via specially crafted request
A flaw was found in the moddavlock module of httpd. This vulnerability allows a remote unauthenticated attacker to crash the server due to a NULL pointer dereference via a specially crafted request...
httpd: mod_authn_socache: NULL pointer dereference can cause a child process crash
A flaw was found in the modauthnsocache module of httpd. This vulnerability allows an unauthenticated remote user to crash a child process due to a NULL pointer dereference when the server is operating in a caching forward proxy configuration...
FreeRDP: FreeRDP: Denial of Service via crafted smartcard cache requests
A flaw was found in FreeRDP. When smartcard emulation is enabled, a remote attacker can send specially crafted smartcard cache requests to a FreeRDP client. This can lead to a null pointer dereference, causing the client process to terminate and disrupting active remote desktop sessions...
FreeRDP: FreeRDP: Denial of Service via crafted smartcard cache requests
A flaw was found in FreeRDP. When smartcard emulation is enabled, a remote attacker can send specially crafted smartcard cache requests to a FreeRDP client. This can lead to a null pointer dereference, causing the client process to terminate and disrupting active remote desktop sessions...
SUSE CVE-2026-78123
strongSwan 5.0.2 through 6.0.7 has an Expired Pointer Dereference in PKCS7 parsing in the openssl plugin...