Linux kernel bonding DoS

The vulnerability of the bondenslave function in the drivers/net/bonding/bondmain.c file of the Linux kernel network device driver is related to the use of pointers. Exploiting this vulnerability could allow an attacker to cause a service failure...

Direct Rendering Infrastructure Heap Buffer Overflow DoS

The vulnerability of the msmioctlgeminfogetmetadata function in the drivers/gpu/drm/msm/msmdrv.c module of the Direct Rendering Infrastructure DRI driver in the Linux operating system is related to the use of pointers. Exploiting this vulnerability could allow a remote attacker to cause a service...

Linux AMD GPU Kernel Heap Buffer Overflow DoS

The vulnerability of the amdgpurasrestorebadpages function in the driver/gpu/drm/amd/amdgpu/amdgpuras.c file of the Direct Rendering Infrastructure DRI AMD GPU kernel for the Linux operating system is related to the use of pointers. Exploiting this vulnerability could allow an attacker to cause a...

Linux GPIO Kernel Module Heap Buffer Overflow DoS

The vulnerability of the loongsongpioinitirqchip function in the drivers/gpio/gpio-loongson-64bit.c file of the Linux kernel’s GPIO driver is related to the use of a pointer. Exploiting this vulnerability could allow an attacker to cause a system failure...

rose_connect() Heap Buffer Overflow DoS

The vulnerability of the roseconnect function in the net/rose/afrose.c module, which implements networking functions for the Linux operating system’s kernel, is related to the use of pointers. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

Linux IPv6 Protocol Heap Buffer Overflow DoS

The vulnerability of the fib6nhinit function in the net/ipv6/route.c module of the Linux operating system’s IPv6 kernel implementation is related to the use of pointers. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux kernel Heap Buffer Overflow DoS

The vulnerability of the f81604readintcallback function in the drivers/crypto/ccp/sev-dev-tsm.c file of the Linux kernel cryptographic accelerator driver is related to the use of pointers. Exploiting this vulnerability could allow an attacker to cause a system failure...

Linux kernel Bonding RCE

The vulnerability of the bonddebugrlbhashshow function in the drivers/net/bonding/bonddebugfs.c file of the Linux kernel network device driver is related to the use of pointers. Exploiting this vulnerability could allow an attacker to cause a system failure...

netfilter Kernel Buffer Overflow DoS

The vulnerability of the functions xtcheckmatch and xtchecktarget in the net/netfilter/xtables.c module of the netfilter component of the Linux operating system is related to the use of pointers. Exploiting this vulnerability could allow an attacker to cause a service failure...

RockyLinux 9 : thunderbird (RLSA-2026:49921)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:49921 advisory. firefox: thunderbird: Site isolation issue in the DOM: Navigation component CVE-2026-15719 firefox: thunderbird: Invalid pointer in the JavaScript:...

Astra Linux – Vulnerability in Firefox

DoS attack due to an invalid pointer in the Audio/Video: Web Codecs component. This vulnerability was fixed in Firefox 151, Firefox ESR 140.11, Thunderbird 151, and Thunderbird 140.11...

Linux Distros Unpatched Vulnerability : CVE-2026-63924

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ipv6: exthdrs: refresh nh pointer after ipv6hopjumbo ipv6hopjumbo calls pskbtrimrcsum, which can change skb pointers. Let's recompute nh pointer to make sure an...

CVE-2026-14790

A flaw has been found in GPAC 26.02.0. This affects the function nhmldumpsendframe of the file src/filters/writenhml.c of the component Media File Handler. Executing a manipulation can lead to null pointer dereference. The attack requires local access. The exploit has been published and may be...

OpenSC: `sc_compacttlv_find_tag` can return out-of-bounds pointers

...

Azure Linux 3.0 Security Update: kernel (CVE-2023-52696)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-52696 advisory. - In the Linux kernel, the following vulnerability has been resolved: powerpc/powernv: Add a null pointer chec...

CVE-2022-23595

Tensorflow is an Open Source Machine Learning Framework. When building an XLA compilation cache, if default settings are used, TensorFlow triggers a null pointer dereference. In the default scenario, all devices are allowed, so flr-configproto is nullptr. The fix will be included in TensorFlow...

PT-2026-1511

Name of the Vulnerable Software and Affected Versions iccDEV versions prior to 2.3.1.2 Description iccDEV is a set of libraries and tools for interacting with International Color Consortium ICC color management profiles. Versions prior to 2.3.1.2 contain a NULL pointer member call issue that...

Linux kernel IRQ DoS

Vulnerability of the applicprobe function in the drivers/irqchip/irq-riscv-aplic-main.c module – The Linux kernel’s IRQ chip support driver is vulnerable due to a pointer issue. Exploiting this vulnerability could allow an attacker to cause a service failure...

SUSE-SU-2025:21117-1 Security update for kernel-livepatch-MICRO-6-0-RT_Update_5

This update for kernel-livepatch-MICRO-6-0-RTUpdate5 fixes the following issues: - CVE-2025-23145: mptcp: fix NULL pointer in canacceptnewsubflow bsc1242882 - CVE-2025-38500: xfrm: interface: fix use-after-free after changing collectmd xfrm interface bsc1248672 - CVE-2025-38616: tls: handle data...

SUSE-SU-2025:21094-1 Security update for kernel-livepatch-MICRO-6-0_Update_5

This update for kernel-livepatch-MICRO-6-0Update5 fixes the following issues: - CVE-2025-23145: mptcp: fix NULL pointer in canacceptnewsubflow bsc1242882 - CVE-2025-38500: xfrm: interface: fix use-after-free after changing collectmd xfrm interface bsc1248672 - CVE-2025-38616: tls: handle data...