CLSA-2026-1778787063 kernel: Fix of 122 CVEs

net: skbuff: propagate shared-frag marker through pskbcopy - mptcp: always handle address removal under msk socket lock CVE-2025-21875 - uprobes: Reject the shared zeropage in uprobewriteopcode CVE-2025-21881 - net: hns3: make sure ptp clock is unregister and freed if hclgeptpgetcycle returns an...

TagLib DoS

The vulnerability of the library for working with TagLib audio metadata is related to pointer assignment errors. Exploiting this vulnerability can allow an attacker to trigger a service failure using a specially created WAV file...

DNSmasq security vulnerability

DNSmasq is a DNS configuration tool developed by Simon Kelley. DNSmasq has a security vulnerability, which stems from a buffer overflow in the extractaddresses function. This vulnerability allows attackers to trigger heap-based out-of-bounds reads by exploiting malformed DNS responses, causing a...

SUSE CVE-2026-43463

In the Linux kernel, the following vulnerability has been resolved: rxrpc, afs: Fix missing error pointer check after rxrpckernellookuppeer rxrpckernellookuppeer can also return error pointers in addition to NULL, so just checking for NULL is not sufficient. Fix this by: 1 Changing...

BPF Libbpf Pointer Dereferencing DoS

The vulnerability of the BPF Libbpf loader library is related to pointer dereferencing errors. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux Audit extract_timestamp function DoS

The vulnerability of the extracttimestamp function in the Linux Audit storage and record-searching tool is related to pointer dereferencing errors. Exploiting this vulnerability could allow an attacker to cause a service failure...

ROS-20260320-73-0003

A vulnerability in the WebSocket protocol implementation of the libsoup library of the GNOME GUI is related to pointer dereferencing errors. Exploitation of the vulnerability could allow a remote attacker to cause a denial of service by sending a specially crafted POST request...

idpf Component DoS

The vulnerability of the idpf component in the Linux operating system’s kernel is related to pointer arithmetic errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260120-7305

A vulnerability in the tcp component of the Linux operating system kernel is related to pointer dereferencing errors. Exploitation of the vulnerability could allow an attacker to cause a denial of service...

ROS-20260119-7330

A vulnerability in the vidtvbridge.c component of the Linux kernel is related to pointer dereferencing errors. Exploitation of the vulnerability could allow an attacker to cause a denial of service...

Linux driver Net USB Asix DoS

The vulnerability in the net/usb/asixdevices.c driver of the Linux operating system is related to pointer assignment errors. Exploiting this vulnerability allows an attacker to cause service failures...

Foxit PDF Reader Pointer Assignment Arbitrary JavaScript Execution

The vulnerability of the Foxit PDF Reader formerly Foxit Reader and the Foxit PDF Editor formerly Foxit PhantomPDF document viewing software is related to pointer assignment errors. Exploiting this vulnerability can allow an attacker to execute arbitrary JavaScript code using a specially crafted...

📄 Microsoft Windows 11 Administrator Protection Bypass / Privilege Escalation

Microsoft Windows 11 suffers from an administrator protection bypass local privilege escalation vulnerability. Proof of concept Metasploit module included. =============================================================================================================================================...

ROS-20251006-01

A vulnerability in the certtool utility of the GnuTLS transport layer security library is related to an operation exceeding the buffer boundaries. operation outside of a buffer in memory. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of service...

Libmysofa verifyAttribute DoS

The vulnerability of the verifyAttribute function in the Libmysofa library for audio processing is related to pointer dereferencing errors. Exploiting this vulnerability allows a remote attacker to cause service interruptions...

Linux scmi_cpufreq_get_rate() cpufreq_cpu_get_raw() DoS

The vulnerabilities of the scmicpufreqgetrate and cpufreqcpugetraw functions in the Linux operating system are related to pointer arithmetic errors. Exploiting these vulnerabilities can allow an attacker to cause a service failure...

Linux kernel NULL Pointer DoS

The vulnerability of the Linux operating system’s kernel is related to errors in the assignment of the NULL pointer. Exploiting this vulnerability can allow an attacker to cause a service failure...

net/mlx5 DoS

The vulnerability of the net/mlx5 component in the Linux operating system is related to pointer assignment errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2023-53440 nilfs2: fix sysfs interface lifetime

In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix sysfs interface lifetime The current nilfs2 sysfs support has issues with the timing of creation and deletion of sysfs entries, potentially leading to null pointer dereferences, use-after-free, and lockdep warnings...

ROS-20250804-03

Vulnerability of NCompress::NRar5::CDecoder method of RAR5 decoder of 7-Zip archiver is related to possibility of heap-based buffer overflow. Exploitation of the vulnerability could allow an attacker to cause a denial of denial of service Vulnerability of NArchive::NCom::CHandler::GetStream metho...