Linux Kernel Security Vulnerabilities

Versions of the Linux kernel prior to 6.18.53 and 7.2.7 contain security vulnerabilities. These vulnerabilities stem from a pointer issue in the qla2x00memalloc function, where the pointer released is not set to null. This leads to a second release of the qla2x00memfree function, which dereferenc...

Linux kernel bonding DoS

The vulnerability in the bondenslave function within the drivers/net/bonding/bondmain.c file of the Linux kernel network device driver is related to dereferencing pointers. Exploitation of this vulnerability may allow an attacker to cause a denial of service...

Direct Rendering Infrastructure DoS

The vulnerability in the msmioctlgeminfogetmetadata function within the drivers/gpu/drm/msm/msmdrv.c file of the Direct Rendering Infrastructure DRI driver for the Linux kernel is related to dereferencing an array. Exploitation of this vulnerability may allow a remote attacker to cause a denial o...

Linux AMD GPU Kernel Heap Buffer Overflow DoS

The vulnerability of the amdgpurasrestorebadpages function in the driver/gpu/drm/amd/amdgpu/amdgpuras.c file of the Direct Rendering Infrastructure DRI AMD GPU kernel for the Linux operating system is related to the use of pointers. Exploiting this vulnerability could allow an attacker to cause a...

Linux kernel Heap Buffer Overflow DoS

The vulnerability of the f81604readintcallback function in the drivers/crypto/ccp/sev-dev-tsm.c file of the Linux kernel cryptographic accelerator driver is related to the use of pointers. Exploiting this vulnerability could allow an attacker to cause a system failure...

Linux netfilter DoS

The vulnerability in the xtcheckmatch and xtchecktarget functions within net/netfilter/xtables.c of the Linux kernel’s netfilter module is related to dereferencing a pointer. Exploitation of this vulnerability may allow an attacker to cause a denial of service...

Linux kernel IPv6 DoS

The vulnerability in the fib6nhinit function within net/ipv6/route.c of the Linux kernel’s IPv6 implementation is related to dereferencing an address pointer. Exploitation of this vulnerability may allow an attacker to cause a denial of service...

Linux kernel Heap Buffer Overflow DoS

The vulnerability in the bonddebugrlbhashshow function within the drivers/net/bonding/bonddebugfs.c file of the Linux kernel network device driver is related to dereferencing an array. Exploitation of this vulnerability may allow an attacker to cause a denial of service...

Linux GPIO Kernel Module Heap Buffer Overflow DoS

The vulnerability of the loongsongpioinitirqchip function in the drivers/gpio/gpio-loongson-64bit.c file of the Linux kernel’s GPIO driver is related to the use of a pointer. Exploiting this vulnerability could allow an attacker to cause a system failure...

Linux kernel Network DoS

The vulnerability in the roseconnect function within net/rose/afrose.c, which implements network functions of the Linux kernel, is related to dereferencing a pointer. Exploitation of this vulnerability may allow a remote attacker to cause a denial of service...

RockyLinux 9 : thunderbird (RLSA-2026:49921)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:49921 advisory. firefox: thunderbird: Site isolation issue in the DOM: Navigation component CVE-2026-15719 firefox: thunderbird: Invalid pointer in the JavaScript:...

Astra Linux – Vulnerability in Firefox

DoS attack due to an invalid pointer in the Audio/Video: Web Codecs component. This vulnerability was fixed in Firefox 151, Firefox ESR 140.11, Thunderbird 151, and Thunderbird 140.11...

Linux Distros Unpatched Vulnerability : CVE-2026-63924

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ipv6: exthdrs: refresh nh pointer after ipv6hopjumbo ipv6hopjumbo calls pskbtrimrcsum, which can change skb pointers. Let's recompute nh pointer to make sure an...

CVE-2026-14790

A flaw has been found in GPAC 26.02.0. This affects the function nhmldumpsendframe of the file src/filters/writenhml.c of the component Media File Handler. Executing a manipulation can lead to null pointer dereference. The attack requires local access. The exploit has been published and may be...

OpenSC: `sc_compacttlv_find_tag` can return out-of-bounds pointers

...

Azure Linux 3.0 Security Update: kernel (CVE-2023-52696)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-52696 advisory. - In the Linux kernel, the following vulnerability has been resolved: powerpc/powernv: Add a null pointer chec...

CVE-2022-23595

Tensorflow is an Open Source Machine Learning Framework. When building an XLA compilation cache, if default settings are used, TensorFlow triggers a null pointer dereference. In the default scenario, all devices are allowed, so flr-configproto is nullptr. The fix will be included in TensorFlow...

PT-2026-1511

Name of the Vulnerable Software and Affected Versions iccDEV versions prior to 2.3.1.2 Description iccDEV is a set of libraries and tools for interacting with International Color Consortium ICC color management profiles. Versions prior to 2.3.1.2 contain a NULL pointer member call issue that...

Linux kernel IRQ DoS

Vulnerability of the applicprobe function in the drivers/irqchip/irq-riscv-aplic-main.c module – The Linux kernel’s IRQ chip support driver is vulnerable due to a pointer issue. Exploiting this vulnerability could allow an attacker to cause a service failure...

SUSE-SU-2025:21117-1 Security update for kernel-livepatch-MICRO-6-0-RT_Update_5

This update for kernel-livepatch-MICRO-6-0-RTUpdate5 fixes the following issues: - CVE-2025-23145: mptcp: fix NULL pointer in canacceptnewsubflow bsc1242882 - CVE-2025-38500: xfrm: interface: fix use-after-free after changing collectmd xfrm interface bsc1248672 - CVE-2025-38616: tls: handle data...