ROS-20261006-73-0368

The vulnerability of the processsdp function in the net/netfilter/nfconntracksip.c module of the netfilter component in the Linux operating system’s kernel is related to the access to an uninitialized pointer. Exploiting this vulnerability could allow an attacker to compromise the confidentiality...

ROS-20261006-73-0261

The vulnerability of the Linux operating system’s kernel is related to pointer arithmetic errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20261006-73-0028

The vulnerability in the net/netfilter/nftablesapi.c component of the Linux operating system is related to the dereferencing of a pointer whose validity has expired. Exploiting this vulnerability can allow an attacker to cause a service failure...

PT-2026-106685

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the RDMA component where the bnxt re init dcb wq function ignores a failed allocation. Consequently, the async DCB handler subsequently calls queue work using a NULL...

PT-2026-106597

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.2.10-1.1 Description A null pointer dereference occurs in the Linux kernel when a module is unloaded while a perf connection is active. The function pmu detach event sets the event-pmu pointer to null, which...

PT-2026-106293

Name of the Vulnerable Software and Affected Versions SSSD affected versions not specified Description A local user can cause a denial of service DoS by disrupting system authentication services. The issue occurs during the handling of Generic Security Services Application Programming Interface...

PT-2026-115804

In the Linux kernel, the following vulnerability has been resolved: ALSA: pcm: set timer-private data before registering the PCM timer snd pcm timer init calls snd device register to link the new struct snd timer into the global timer list while it still carries hw.c resolution = snd pcm timer...

CVE-2026-98314: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ALSA: pcm: set timer-privatedata before registering the PCM timer sndpcmtimerinit calls snddeviceregister to link the new struct sndtimer into the global timer list while it still carries hw.cresolution = sndpcmtimerresolution an...

PT-2026-115797

In the Linux kernel, the following vulnerability has been resolved: KVM: PPC: Book3S HV: fix use-after-free in kvmhv emulate tlbie all lpid kvmhv emulate tlbie all lpid iterates the nested-guest IDR and drops mmu lock before calling kvmhv emulate tlbie lpid, but does not hold a reference on the k...

PT-2026-106631

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.2.10-1.1 Description A NULL pointer dereference occurs in the skfp driver when setting the MAC address of a down interface. The function skfp ctl set mac address calls ResetAdapter without verifying if the...

PT-2026-106637

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.2.10-1.1 Description An issue exists in the ALSA hda component where a tracepoint is triggered before verifying if a stream has been successfully assigned. When hardware streams are exhausted, stream assignment...

Windows Secure Kernel Mode Privilege Escalation

The vulnerability of the Windows Secure Kernel Mode mechanism in Windows operating systems is related to the swapping of a non-trusted pointer. Exploiting this vulnerability can allow an attacker to increase their privileges...

PT-2026-115815

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: check ras and obj before dereference nbio v7 9 handle ras controller intr no bifring dereferences ras and obj without checking either for NULL. Both amdgpu ras get context and amdgpu ras find obj can return NULL, e.g...

PT-2026-106507

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.2.10-1.1 Description An issue exists in the drm/amdgpu component where the amdgpu amdkfd clear kfd mapping function assumes that a non-NULL kfd dev has a fully populated node array. This assumption is incorrect...

ROS-20261006-73-0340

The vulnerability of the sigdsend function in Linux operating system kernels is related to unreliable pointer dereferencing. Exploiting this vulnerability could allow an attacker to cause a service failure...

ROS-20261006-73-0140

The vulnerability of the NFSD component in the Linux operating system’s kernel is related to the dereferencing of a pointer whose expiration time has expired. Exploiting this vulnerability can allow an attacker to trigger a service failure...

CVE-2026-57545: Untrusted Pointer Dereference

Memory corruption when processing draw objects of incorrect type during graphics command list execution...

SUSE CVE-2026-66859

NULL Pointer Dereference, Use of Uninitialized Variable vulnerability in Apache Thrift cglib bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

github.com/getkin/kin-openapi: kin-openapi: Denial of Service via nil-pointer dereference in openapi3filter

A flaw was found in kin-openapi's openapi3filter module. This vulnerability allows a remote, unauthenticated attacker to cause a Denial of Service DoS by crashing the application. The issue occurs when processing OpenAPI 3.1 array schemas that lack an items definition, causing the parser to...

github.com/getkin/kin-openapi: kin-openapi: Denial of Service via nil-pointer dereference in openapi3filter

A flaw was found in kin-openapi's openapi3filter module. This vulnerability allows a remote, unauthenticated attacker to cause a Denial of Service DoS by crashing the application. The issue occurs when processing OpenAPI 3.1 array schemas that lack an items definition, causing the parser to...