113087 matches found
Astra Linux – vulnerability in linux-6.1, linux-6.12
In the Linux kernel, the following vulnerability has been resolved: sctp: stream: fully roll back denied add-stream state When ADDOUTSTREAMS is denied, SCTP only shrinks the queued chunks and then lowers outcnt. This leaves removed stream metadata behind, so a later re-add can reuse a stale ext a...
OPENSUSE-SU-2026:21950-1 Security update for 389-ds
This update for 389-ds fixes the following issues: - CVE-2026-11770: pre-auth LDAP filter injection in CleanAllRUV status check bsc1273133. - CVE-2026-18355: heap buffer overflow in the SASL I/O layer allows a remote authenticated attacker to cause a denial of service or potentially achieve remot...
SUSE-SU-2026:23916-1 Security update for 389-ds
This update for 389-ds fixes the following issues: - CVE-2026-11770: pre-auth LDAP filter injection in CleanAllRUV status check bsc1273133. - CVE-2026-18355: heap buffer overflow in the SASL I/O layer allows a remote authenticated attacker to cause a denial of service or potentially achieve remot...
CLSA-2026-1790065872 freerdp: Fix of 2 CVEs
CVE-2026-67291: fix heap out-of-bounds read in updateprocessglyphfragments; reject a GLYPHFRAGMENTADD update whose one-byte server-declared fragment size exceeds the bytes remaining in the received order buffer, instead of passing it straight to glyphcachefragmentput which copies that many bytes...
CLSA-2026-1790172301 nginx: Fix of 3 CVEs
CVE-2026-27651: fix null pointer dereference in ngxmailauthhttpmodule when clearing the password in auth http requests with CRAM-MD5/APOP - CVE-2026-27654: fix heap buffer overflow in ngxhttpdavmodule when a COPY/MOVE destination URI is shorter than the location alias - CVE-2026-27654: also...
FreeRDP: FreeRDP: Denial of Service via crafted smartcard cache requests
A flaw was found in FreeRDP. When smartcard emulation is enabled, a remote attacker can send specially crafted smartcard cache requests to a FreeRDP client. This can lead to a null pointer dereference, causing the client process to terminate and disrupting active remote desktop sessions...
FreeRDP: FreeRDP: Denial of Service via crafted smartcard cache requests
A flaw was found in FreeRDP. When smartcard emulation is enabled, a remote attacker can send specially crafted smartcard cache requests to a FreeRDP client. This can lead to a null pointer dereference, causing the client process to terminate and disrupting active remote desktop sessions...
FreeRDP: FreeRDP: Denial of Service via crafted smartcard cache requests
A flaw was found in FreeRDP. When smartcard emulation is enabled, a remote attacker can send specially crafted smartcard cache requests to a FreeRDP client. This can lead to a null pointer dereference, causing the client process to terminate and disrupting active remote desktop sessions...
firefox: Privilege escalation due to invalid pointer in the Graphics component
A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Privilege escalation due to invalid pointer in the Graphics component...
ROS-20260924-73-0027
The vulnerability of the mesonsmprobe function in the drivers/firmware/meson/mesonsm.c file of the Linux kernel’s firmware module is related to pointer manipulation. Exploiting this vulnerability could allow a remote attacker to cause a system failure...
ROS-20260924-73-0049
The vulnerability of the mtkhwlrogetfdirall function in the drivers/net/ethernet/mediatek/mtkethsoc.c module of the Linux network adapter driver software is related to the use of pointers. Exploiting this vulnerability could allow a remote attacker to cause a service failure...
PT-2026-105002
In the Linux kernel, the following vulnerability has been resolved: spi: Add NULL check for spi get device id in spi get device match data Prevent NULL pointer dereference when spi get device id returns NULL, which can happen when using driver override without matching SPI ID entry...
PT-2026-98103
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference exists in the usbip module within the vhci hcd component. The function status show vhci fails to verify if the hcd pointer returned by platform get drvdata is...
PT-2026-98135
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference exists in the rtw fw adaptivity result function within fw.c of the rtw88 wifi driver. The issue occurs because devices using the 8821CE chip do not define the...
PT-2026-98121
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference exists in the mmc davinci irq function within the Linux kernel. The issue occurs because the function only returns early when both host-cmd and host-data are...
PT-2026-104908
In the Linux kernel, the following vulnerability has been resolved: wifi: rtw88: Add NULL check for chip-edcca th in rtw fw adaptivity result It was recently reported that rtw fw adaptivity result in fw.c dereferences rtwdev-chip-edcca th without a NULL check. The issue is that devices with the...
CVE-2026-97446: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: ACPICA: Fix NULL pointer dereference in acpinscustompackage acpinscustompackage unconditionally dereferences the first element of the package to read the BIX version number, without checking for NULL: if Elements-Common.Type !=...
PT-2026-104989
In the Linux kernel, the following vulnerability has been resolved: ACPICA: Fix NULL pointer dereference in acpi ns custom package acpi ns custom package unconditionally dereferences the first element of the package to read the BIX version number, without checking for NULL: if Elements-Common.Typ...
CVE-2026-97484
In the Linux kernel, the following vulnerability has been resolved: usbip: vhcihcd: fix NULL deref in statusshowvhci platformgetdrvdata can return NULL if a VHCI host controller's probe failed e.g. due to USB bus number exhaustion. statusshowvhci checked for a NULL pdev but not for a NULL hcd...
PT-2026-98052
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description In the ALSA es18xx component, the snd es18xx mixer function creates controls using snd ctl new1. If snd ctl new1 fails and returns NULL, the system attempts to store bookkeeping pointers...