CVE-2026-98358

A flaw was found in the Linux kernel's iSCSI Extensions for Remote Direct Memory Access iSER driver. A remote storage target can trigger a Denial of Service DoS by sending an unexpected remote invalidation response for write operations transmitted as immediate data. In this scenario, the initiato...

CVE-2026-98356

A flaw was found in the Linux kernel's Broadcom NetXtreme bnxtre driver. During device initialization, the driver fails to verify that memory allocation for the Data Center Bridging DCB workqueue succeeded. Under low-memory conditions where this setup fails, a subsequent asynchronous DCB...

CVE-2026-98355

A flaw was found in the Linux kernel's RDMA Remote Direct Memory Access subsystem. When connection path initialization fails in the RDMA Transport RTRS driver, error cleanup routines invoke event tracing before the associated object name is set. This issue leads to a null pointer dereference,...

CLSA-2026-1791118211 libxml2: Fix of 2 CVEs

CVE-2025-7425: clear the attribute type through the live attr argument in xmlRemoveID instead of id-attr, which read the xmlID already freed by xmlHashRemoveEntry - CVE-2022-23308: normalize the ID value in xmlRemoveID after it is read from the attribute instead of before, where the pointer was...

SUSE CVE-2026-66081

Access of Uninitialized Pointer vulnerability in Apache Thrift cglib bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

SUSE CVE-2026-98220

In the Linux kernel, the following vulnerability has been resolved: schedext: Fix NULL sched deref in kfunc sub-sched error paths When the root scheduler has sub-scheds attached, the COMPAT kfunc wrappers scxbpfselectcpuand and scxbpfdsqinsertvtime refuse the call and report to @p's scheduler:...

SUSE CVE-2026-98314

In the Linux kernel, the following vulnerability has been resolved: ALSA: pcm: set timer-privatedata before registering the PCM timer sndpcmtimerinit calls snddeviceregister to link the new struct sndtimer into the global timer list while it still carries hw.cresolution = sndpcmtimerresolution an...

SUSE CVE-2026-98355

In the Linux kernel, the following vulnerability has been resolved: RDMA/rtrs: guard against null kobj name In the client, if initpath errors, the callee tries to clean up with rtrscltcloseconns. However, this can lead to calling the event tracing code with cltpath-kobj-name being NULL and thus...

CVE-2026-107169: NULL Pointer Dereference

A flaw was found in m17n-lib. An attacker could provide specially crafted or truncated UTF-8 input to trigger an unhandled null pointer dereference during text processing. This issue causes the application to crash unexpectedly, resulting in a Denial of Service DoS...

CVE-2026-107170: NULL Pointer Dereference

A flaw was found in m17n-lib. A partial failure during library initialization can leave an internal driver pointer uninitialized. Under specific error conditions, such as system resource exhaustion or database corruption, an application attempting to open an input method dereferences this null...

ROS-20261007-73-0038

The vulnerability in the kernel-lt is related to the swapping of the zero pointer. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20261007-73-0373

The vulnerability in the kernel-lt is related to the swapping of the zero pointer. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20261007-73-0366

The vulnerability in the kernel-lt is related to the swapping of the zero pointer. Exploiting this vulnerability can allow an attacker to cause a service failure...

Wireshark 1.4.x < 1.4.11 Multiple Vulnerabilities (macOS)

The version of Wireshark installed on the remote macOS / Mac OS X host is prior to 1.4.11. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-1.4.11 advisory. - Laurent Butti discovered that Wireshark failed to properly check record sizes for many packet capture...

CentOS Linux 8.4 [TuxCare] Security Update: platform-python / platform-python-debug / platform-python-devel / etc (CENTOS8.4:CLSA-2026:1791413715)

The CentOS Linux 8.4 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS8.4:CLSA-2026:1791413715 advisory. - A remote, unauthenticated TLS client can make a server crash or call through a freed pointer if its snicallback assigns a different context...

ROS-20261007-73-0419

The vulnerability in the kernel-lt is related to the swapping of the zero pointer. Exploiting this vulnerability can allow an attacker to cause a service failure...

Failover Cluster Code Execution

The vulnerability of the Failover Cluster component for Windows operating systems is related to the swapping of an unreliable pointer. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

ROS-20261007-73-0204

The vulnerability of the rtwBIPverify function in the drivers/staging/rtl8723bs/core/rtwsecurity.c module relates to access to an uninitialized pointer. Exploiting this vulnerability could allow an attacker to compromise the integrity and accessibility of protected information...

ROS-20261007-73-0067

The vulnerability of the bonddebugrlbhashshow function in the drivers/net/bonding/bonddebugfs.c file of the Linux kernel network device driver is related to the use of pointers. Exploiting this vulnerability could allow an attacker to cause a system failure...

ROS-20261007-73-0057

The vulnerability of the asusreportfixup function in the driver module/hid/hid-asus.c file of the Linux kernel’s device subsystem interface driver is related to the release of an incorrect pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...