kernel: NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr

A flaw was found in the Linux kernel's NFSv4/pNFS implementation. The nfs4decodempdsaddr function, responsible for decoding network address information, does not properly handle zero-length raddr opaque data. A malicious or compromised metadata server can exploit this by providing a zero-length...

K000163196: Linux kernel vulnerability CVE-2026-53400

Security Advisory Description In the Linux kernel, the following vulnerability has been resolved: i2c: core: fix adapter registration race Adapters can be looked up based on their id using i2cgetadapter which takes a reference to the embedded struct device. Make sure that the adapter including it...

SUSE CVE-2026-74379

In the Linux kernel, the following vulnerability has been resolved: dax/kmem: account for partial discontiguous resource upon removal When devdaxkmemprobe partially succeeds at least one range is mapped but a subsequent range fails requestmemregion or addmemorydrivermanaged, the probe silently...

SUSE CVE-2026-79778

rclone before v1.75.0 contains a denial of service vulnerability in the WebDAV TUS creation handler that dereferences a nil response before checking for transport errors. A malicious or compromised configured endpoint can reset connections during TUS uploads to trigger a panic that terminates...

PT-2026-90826

This update for kubevirt, virt-pr-helper-container fixes the following issues: Changes in kubevirt: - Package the persistent-reservation helper's entrypoint script bsc1276520: virt-operator runs the pr-helper container with the command /entrypoint.sh, which symlinks the multipath socket into plac...

PT-2026-84950

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference occurs in the psxpad-spi driver. The function psxpad spi suspend attempts to retrieve the controller state using spi get drvdata, but because the probe process...

PT-2026-90892

In the Linux kernel, the following vulnerability has been resolved: Input: psxpad-spi - set driver data before use psxpad spi suspend retrieves the controller state with spi get drvdata, but probe never stores it, so suspend dereferences a NULL pointer. Store it during probe...

PT-2026-90902

A NULL pointer dereference flaw was found in GStreamer's RTSP support library. The vulnerability occurs while parsing an Authorization or WWW-Authenticate header that uses Digest authentication. Specially crafted whitespace placement around a parameter's terminator can cause an internal length...

PT-2026-84915

RTU500 has a vulnerability, where high-load scenarios, such as sending GI requests at short intervals, may cause a NULL pointer dereference in the last entry of the enhanced message queue. This can cause a BCI IEC104 fatal write error, resulting in connection interruption and restart, and...

PT-2026-84981

Name of the Vulnerable Software and Affected Versions GStreamer affected versions not specified Description A NULL pointer dereference flaw exists in the RTSP support library. The issue occurs during the parsing of Authorization or WWW-Authenticate headers using Digest authentication within the g...

CVE-2026-85150: NULL Pointer Dereference

A NULL pointer dereference flaw was found in GStreamer's RTSP support library. The vulnerability occurs while parsing an Authorization or WWW-Authenticate header that uses Digest authentication. Specially crafted whitespace placement around a parameter's terminator can cause an internal length...

Linux Distros Unpatched Vulnerability : CVE-2026-85150

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A NULL pointer dereference flaw was found in GStreamer's RTSP support library. The vulnerability occurs while parsing an Authorization or WWW-Authenticate heade...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-105458)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-105458 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: brnetfilter: fix panic with metadatadst skb Fix a kernel panic in the brnetfilter modu...

Unity Linux 20.1070-8ae / 20.1070e Security Update: kernel (UTSA-2026-105423)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-105423 advisory. In the Linux kernel, the following vulnerability has been resolved: net: sched: cake: fix null pointer access issue when cakeinit fails When the default qdisc is cak...

CVE-2026-80756: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: selinux: do not cancel a policy conversion that never started selwriteload calls selinuxpolicycancel when selmakepolicynodes fails, and that helper dereferences the outgoing policy to cancel its sidtab conversion. On the first...

CVE-2026-80743: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ASoC: xilinx: formatterpcm: pass auddrvdata to irq handlers The irq handlers take a struct device pointer and call devgetdrvdata to obtain the driver data. However, the driver data is only set at the end of probe, after...

PT-2026-84928

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A crash occurs in the ring-buffer component during the late initcall self-test. In the test ringbuffer function's out free cleanup loop, the check !rb threadscpu only identifies NULL...

PT-2026-90895

In the Linux kernel, the following vulnerability has been resolved: ASoC: xilinx: formatter pcm: pass aud drv data to irq handlers The irq handlers take a struct device pointer and call dev get drvdata to obtain the driver data. However, the driver data is only set at the end of probe, after devm...

CVE-2026-85150: NULL Pointer Dereference

A NULL pointer dereference flaw was found in GStreamer's RTSP support library. The vulnerability occurs while parsing an Authorization or WWW-Authenticate header that uses Digest authentication. Specially crafted whitespace placement around a parameter's terminator can cause an internal length...

CVE-2026-17539: NULL Pointer Dereference

RTU500 has a vulnerability, where high-load scenarios, such as sending GI requests at short intervals, may cause a NULL pointer dereference in the last entry of the enhanced message queue. This can cause a BCIIEC104 fatal write error, resulting in connection interruption and restart, and ultimate...