The vulnerability of the rxe_qp_do_cleanup() function in the drivers/infiniband/sw/rxe/rxe_qp.c module of the Linux operating system’s kernel allows a malicious actor to cause a service failure.

The vulnerability of the rxeqpdocleanup function in the drivers/infiniband/sw/rxe/rxeqp.c module of the Linux operating system’s kernel involves access to an uninitialized pointer. Exploiting this vulnerability could allow a attacker to cause a service failure...

The vulnerability of the raid10_sync_request() function in the drivers/md/raid10.c module of the Linux kernel driver for multiple device types (RAID and LVM) allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the raid10syncrequest function in the drivers/md/raid10.c module of the Linux kernel driver for multiple device types RAID and LVM is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

The vulnerability of the gud_prep_flush() function in the drivers/gpu/drm/gud/gud_pipe.c module of the Direct Rendering Infrastructure (DRI) kernel driver of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the gudprepflush function in the drivers/gpu/drm/gud/gudpipe.c module of the Direct Rendering Infrastructure DRI driver for the Linux operating system is related to the access to an uninitialized pointer. Exploiting this vulnerability could allow an attacker to compromise the...

TencentOS Server 3: httpd:2.4 (TSSA-2026:0732)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:0732 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...

The vulnerability of the arch_prepare_kprobe() function in the arch/powerpc/kernel/kprobes.c module of the PowerPC platform supports Linux’s PowerPC kernel. This vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the archpreparekprobe function in the arch/powerpc/kernel/kprobes.c module, which is part of the PowerPC platform support for the Linux operating system, relates to the assignment of pointers. Exploiting this vulnerability could allow an attacker to compromise the...

The vulnerability of the eeprom_prepare_data() function in the net/ethtool/eeprom.c module of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the eeprompreparedata function in the net/ethtool/eeprom.c module of the Linux operating system is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected informati...

The vulnerability of the intel_prepare_plane_fb() function in the drivers/gpu/drm/i915/display/intel_atomic_plane.c file of the Direct Rendering Infrastructure (DRI) driver for the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the intelprepareplanefb function in the drivers/gpu/drm/i915/display/intelatomicplane.c file, a part of the Direct Rendering Infrastructure DRI driver for the Linux operating system’s kernel, is related to the use of pointers. Exploiting this vulnerability could allow an...

ROS-20260722-73-0002

The vulnerability of the nhmldmxsendsample function in the MP4Box multimedia platform’s utility library, related to the assignment of the null pointer during data reading fread, allows a malicious actor to cause service interruptions...

MiracleLinux 9 : php:8.2 (AXSA:2026-1328:01)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1328:01 advisory. PHP: PHP: Denial of Service via improper handling of signed characters in ctype functions CVE-2026-7258 PHP: PHP-FPM: PHP-FPM: Cross-Site Scripting...

The vulnerability of the ext4_mb_good_group() function in the fs/ext4/mballoc.c module of the Ext4 file system in the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the ext4mbgoodgroup function in the fs/ext4/mballoc.c module of the Ext4 file system in the Linux operating system is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the pt_issue_pending() function in the drivers/dma/ptdma/ptdma-dmaengine.c file of the Linux kernel’s DMA driver module allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the ptissuepending function in the drivers/dma/ptdma/ptdma-dmaengine.c file of the Linux kernel’s DMA driver module is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the...

SUSE SLED15: ffmpeg / libavcodec-devel / libavcodec57 / libavdevice57 / etc (SUSE-SU-2026:3149-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:3149-1 advisory. This update for ffmpeg fixes the following issue - CVE-2025-10256: NULL pointer dereference in Firequalizer filter...

The vulnerability of the r5l_exit_log() function in the drivers/md/raid5-cache.c module of the Linux operating system’s device driver suite, which can be exploited by attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the r5lexitlog function in the drivers/md/raid5-cache.c module of the Linux device driver for multiple devices RAID and LVM involves pointer manipulation. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of...

NULL Pointer Dereference

Overview Affected versions of this package are vulnerable to NULL Pointer Dereference in the heifimagehandlegetimagetiling function when processing a malformed uncompressed HEIF image item that has an associated uncC property but lacks an associated ispe property. An attacker can cause a crash by...

CVE-2026-63991

A flaw was found in the Linux kernel's Bluetooth 6lowpan module. This vulnerability occurs because the sendmcastpkt function does not properly check the return value of skbclone, which can be null if memory allocation fails. An attacker could exploit this by triggering a scenario where skbclone...

CVE-2026-63979

A flaw was found in the Linux kernel's net/handshake component. A race condition exists where a network handshake request can be removed and its associated file reference released concurrently while the accept-side code attempts to access it. This can lead to the system attempting to read from...

CVE-2026-47178

libheif is a HEIF and AVIF file format decoder and encoder. In versions 1.19.0 through 1.21.2, a crafted HEIF file uncompressed unci codec, tiled, component-interleaved, 4:2:0 triggers a heap out-of-bounds write in libheif's uncompressed tile decoder. The write overwrites the C++ vtable pointer o...

CVE-2026-47247

libheif is a HEIF and AVIF file format decoder and encoder. Prior to version 1.22.0, two bugs in libheif chain to leak process heap memory as visible pixel values in decoded grid images. An attacker who uploads a crafted AVIF/HEIC file to any server-side image processor WordPress, Sharp/libvips,...

Out-of-bounds Read

Overview Affected versions of this package are vulnerable to Out-of-bounds Read and null pointer dereference in the bundled libvips EXIF decoder, which does not validate the range of EXIF tag groups before passing them to libexif. An attacker can crash the process by supplying an image whose...

CVE-2026-47709 libheif has a NULL pointer dereference in heif_image_handle_get_image_tiling for malformed unci image missing ispe

libheif is a HEIF and AVIF file format decoder and encoder. Versions prior to 1.22.0 crashes in the public C API heifimagehandlegetimagetiling when a malformed uncompressed HEIF image item has an associated uncC property but no associated ispe property. In debug builds this trips the ispe && uncC...