CVE-2026-89489

A flaw was found in the Linux kernel. The sysor1katomic syscall, specific to the openrisc architecture, does not adequately validate user-provided pointers. An unprivileged process can exploit this by supplying kernel addresses to the syscall, gaining unauthorized read and write access to kernel...

CVE-2026-80992

CVE-2026-80992 is a NULL pointer dereference in the Linux kernel's net: ravb (RENESAS AVB Ethernet) driver. The PTP clock is unavailable before the first open, so querying its index can dereference a NULL pointer; registration failures can also leave an error pointer in priv->ptp.clock. Red Ha...

CVE-2026-80805

CVE-2026-80805 affects the Linux kernel XFS filesystem. The vulnerable function xfs_attr3_leaf_verify_entry() accesses namelen and valuelen fields of lentry/rentry structs before verifying that the entry pointer itself falls within bounds. A crafted nameidx pointing near the end of the buffer can...

CVE-2026-81581 User input in WibuKey is used (without proper sanitization) to compute the address of a pointer, which can be exploited to let the user point to any storage, to which Windows responds with a denial of service.

Improper validation of memory boundaries in WibuKey64.sys of WibuKey up to 6.70 for Windows can be exploited by an attacker by setting the pointers outside the scope of the program. This usually results in a denial of service, yet we cannot rule out the possibility of exploits that can cause Remo...

CVE-2026-81581

WibuKey up to 6.70 for Windows contains an improper validation of memory boundaries vulnerability in its WibuKey64.sys kernel driver. User input is used without proper sanitization to compute a pointer address, allowing an attacker to point to arbitrary memory outside the driver's scope. The typi...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: nvme-fc: Null pointer dereferencing has been prevented in nvmefciogetuuid. The nvmefcfcpop structure, which describes an AEN operation, is initialized with a null pointer to the request structure. An FC LLDD may make a call to...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: EFI: Fixed a panic in the kdump kernel. Check whether the getnextvariable function is indeed a valid pointer before calling it. In the kdump kernel, this function is set to NULL, which causes a panic during the kexec-ed kernel...

EUVD-2026-63750

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 has a pointer validation flaw exists in the AIX Virtual SCSI vSCSI initiator driver. Successful exploitation may result in denial of service, privilege escalation, or full compromise of the client LPAR kernel...

EUVD-2026-63747

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary code due to improper validation of an attacker-controlled pointer...

CVE-2026-19442

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 has a pointer validation flaw exists in the AIX Virtual SCSI vSCSI initiator driver. Successful exploitation may result in denial of service, privilege escalation, or full compromise of the client LPAR kernel...

CVE-2026-18840

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary code due to improper validation of an attacker-controlled pointer...

CVE-2026-19442 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 has a pointer validation flaw exists in the AIX Virtual SCSI vSCSI initiator driver. Successful exploitation may result in denial of service, privilege escalation, or full compromise of the client LPAR kernel...

CVE-2026-19442

CVE-2026-19442 is a pointer validation flaw in the AIX Virtual SCSI (vSCSI) initiator driver affecting IBM AIX 7.2, 7.3 and IBM PowerVM VIOS 4.1 . Successful exploitation can lead to denial of service , privilege escalation , or full compromise of the client LPAR kernel . The CVSS 3.1 score is 8....

CVE-2026-18840 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary code due to improper validation of an attacker-controlled pointer...

CVE-2026-18840

IBM AIX 7.2/7.3 and PowerVM VIOS 4.1 are vulnerable to local privilege escalation via improper validation of an attacker-controlled pointer, enabling arbitrary code execution (CVSS 8.2 HIGH). No patch version or remediation guidance is provided in the documents; no in-the-wild exploitation is rep...

PT-2026-79253

Name of the Vulnerable Software and Affected Versions IBM AIX versions 7.2 and 7.3 IBM PowerVM VIOS version 4.1 Description A pointer validation flaw exists in the AIX Virtual SCSI vSCSI initiator driver. This issue could allow an attacker to cause a denial of service, escalate privileges, or...

PT-2026-79250

Name of the Vulnerable Software and Affected Versions IBM AIX versions 7.2 and 7.3 IBM PowerVM VIOS version 4.1 Description Local attackers can execute arbitrary code due to improper validation of an attacker-controlled pointer. Recommendations At the moment, there is no information about a newer...

EUVD-2026-62835

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to improper validation of network-supplied pointers...

CVE-2026-16919 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to improper validation of network-supplied pointers...

CVE-2026-16919

CVE-2026-16919 affects IBM AIX 7.2, 7.3 and IBM PowerVM VIOS 4.1 . The root cause is improper validation of network-supplied pointers , allowing a remote, unauthenticated attacker to execute arbitrary code over the network. The CVSS 3.1 score is 9.8 (CRITICAL) with full impact on confidentiality,...