PT-2026-63380

Name of the Vulnerable Software and Affected Versions NLnet Labs Unbound versions 1.15.0 through 1.25.1 Description A use-after-free issue exists in the handling of DNS-over-TLS DoT forwarded queries. The TLS server name is tied to the lifetime of the serviced query struct but is also referenced ...

PT-2026-63544

Name of the Vulnerable Software and Affected Versions Netty versions prior to 4.1.136.Final Netty versions prior to 4.2.16.Final Description An issue exists in the OcspServerCertificateValidator where out-of-date OCSP Online Certificate Status Protocol responses are flagged but not stopped from...

The vulnerability of the rxe_qp_do_cleanup() function in the drivers/infiniband/sw/rxe/rxe_qp.c module of the Linux operating system’s kernel allows a malicious actor to cause a service failure.

The vulnerability of the rxeqpdocleanup function in the drivers/infiniband/sw/rxe/rxeqp.c module of the Linux operating system’s kernel involves access to an uninitialized pointer. Exploiting this vulnerability could allow a attacker to cause a service failure...

The vulnerability of the raid10_sync_request() function in the drivers/md/raid10.c module of the Linux kernel driver for multiple device types (RAID and LVM) allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the raid10syncrequest function in the drivers/md/raid10.c module of the Linux kernel driver for multiple device types RAID and LVM is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

The vulnerability of the gud_prep_flush() function in the drivers/gpu/drm/gud/gud_pipe.c module of the Direct Rendering Infrastructure (DRI) kernel driver of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the gudprepflush function in the drivers/gpu/drm/gud/gudpipe.c module of the Direct Rendering Infrastructure DRI driver for the Linux operating system is related to the access to an uninitialized pointer. Exploiting this vulnerability could allow an attacker to compromise the...

ROS-20260722-73-0004

The vulnerability of the gflistget function in the MP4Box multimedia platform of GPAC, related to the handling of specially crafted MP4 files involving NULL pointer dereferencing, allows a malicious actor to cause service failures...

TencentOS Server 3: httpd:2.4 (TSSA-2026:0732)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:0732 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...

The vulnerability of the arch_prepare_kprobe() function in the arch/powerpc/kernel/kprobes.c module of the PowerPC platform supports Linux’s PowerPC kernel. This vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the archpreparekprobe function in the arch/powerpc/kernel/kprobes.c module, which is part of the PowerPC platform support for the Linux operating system, relates to the assignment of pointers. Exploiting this vulnerability could allow an attacker to compromise the...

The vulnerability of the intel_prepare_plane_fb() function in the drivers/gpu/drm/i915/display/intel_atomic_plane.c file of the Direct Rendering Infrastructure (DRI) driver for the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the intelprepareplanefb function in the drivers/gpu/drm/i915/display/intelatomicplane.c file, a part of the Direct Rendering Infrastructure DRI driver for the Linux operating system’s kernel, is related to the use of pointers. Exploiting this vulnerability could allow an...

ROS-20260722-73-0002

The vulnerability of the nhmldmxsendsample function in the MP4Box multimedia platform’s utility library, related to the assignment of the null pointer during data reading fread, allows a malicious actor to cause service interruptions...

The vulnerability of the eeprom_prepare_data() function in the net/ethtool/eeprom.c module of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the eeprompreparedata function in the net/ethtool/eeprom.c module of the Linux operating system is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected informati...

The vulnerability of the r5l_exit_log() function in the drivers/md/raid5-cache.c module of the Linux operating system’s device driver suite, which can be exploited by attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the r5lexitlog function in the drivers/md/raid5-cache.c module of the Linux device driver for multiple devices RAID and LVM involves pointer manipulation. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of...

SUSE SLED15: ffmpeg / libavcodec-devel / libavcodec57 / libavdevice57 / etc (SUSE-SU-2026:3149-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:3149-1 advisory. This update for ffmpeg fixes the following issue - CVE-2025-10256: NULL pointer dereference in Firequalizer filter...

MiracleLinux 9 : php:8.2 (AXSA:2026-1328:01)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1328:01 advisory. PHP: PHP: Denial of Service via improper handling of signed characters in ctype functions CVE-2026-7258 PHP: PHP-FPM: PHP-FPM: Cross-Site Scripting...

The vulnerability of the ext4_mb_good_group() function in the fs/ext4/mballoc.c module of the Ext4 file system in the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the ext4mbgoodgroup function in the fs/ext4/mballoc.c module of the Ext4 file system in the Linux operating system is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the pt_issue_pending() function in the drivers/dma/ptdma/ptdma-dmaengine.c file of the Linux kernel’s DMA driver module allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the ptissuepending function in the drivers/dma/ptdma/ptdma-dmaengine.c file of the Linux kernel’s DMA driver module is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the...

NULL Pointer Dereference

Overview Affected versions of this package are vulnerable to NULL Pointer Dereference in the heifimagehandlegetimagetiling function when processing a malformed uncompressed HEIF image item that has an associated uncC property but lacks an associated ispe property. An attacker can cause a crash by...

CVE-2026-63991

A flaw was found in the Linux kernel's Bluetooth 6lowpan module. This vulnerability occurs because the sendmcastpkt function does not properly check the return value of skbclone, which can be null if memory allocation fails. An attacker could exploit this by triggering a scenario where skbclone...

CVE-2026-63979

A flaw was found in the Linux kernel's net/handshake component. A race condition exists where a network handshake request can be removed and its associated file reference released concurrently while the accept-side code attempts to access it. This can lead to the system attempting to read from...

CVE-2026-47178

libheif is a HEIF and AVIF file format decoder and encoder. In versions 1.19.0 through 1.21.2, a crafted HEIF file uncompressed unci codec, tiled, component-interleaved, 4:2:0 triggers a heap out-of-bounds write in libheif's uncompressed tile decoder. The write overwrites the C++ vtable pointer o...