PT-2026-123567

Fix uninitialized pointer dereference in libkrad...

PT-2026-105005

In the Linux kernel, the following vulnerability has been resolved: media: chips-media: wave5: Release m2m ctx after Instance Removed from List Possible use after free if IRQ thread manages to obtain spinlock between m2m ctx release and wave5 release function removing stream instance from list of...

EUVD-2026-86273

OpenEXR 3.4.14 contains a NULL Pointer Dereference in the C++ attribute parsing path. A specially crafted EXR file containing an unknown-type attribute with dataSize set to zero causes the parser to create an opaque attribute with a NULL packeddata pointer. The OpaqueAttribute constructor passes...

PT-2026-97948

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference exists in the lock set class function. This occurs because register lock class can return NULL if the lock class pool is exhausted, graph lock fails, or key...

ROS-20260924-73-0042

The vulnerability of the blkcgactivatepolicy function in the block/blk-cgroup.c module, which supports the block-level kernel in the Linux operating system, is related to the pointer manipulation. Exploiting this vulnerability could allow an attacker to trigger a service failure...

PT-2026-97950

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description In the Linux kernel, the functions eswin clk register pll and eswin register clkdiv declare a clk init data structure on the stack but only initialize specific fields, namely parent data...

CVE-2026-88384

The OpenEXR 3.4.14 library is vulnerable to a NULL Pointer Dereference within the C++ attribute parsing path. When processing a specially crafted EXR file that contains an unknown-type attribute with a dataSize of zero, the parser creates an opaque attribute with a NULL packed_data pointer . The ...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: gstreamer1-plugins-base (UTSA-2026-124535)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-124535 advisory. A NULL pointer dereference flaw was found in GStreamer's RTSP support library. The vulnerability occurs while parsing an Authorization or WWW-Authenticate header tha...

Linux Distros Unpatched Vulnerability : CVE-2026-97516

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: rtw88: Add NULL check for chip-edccath in rtwfwadaptivityresult It was recently reported that rtwfwadaptivityresult in fw.c dereferences rtwdev-chip-edcca...

Linux Distros Unpatched Vulnerability : CVE-2026-93273

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - regulator: tps6594: Fix device node reference leaks in multiphase loop In tps6594regulatorprobe, the multi-phase configuration loop calls offindnodebyname to fi...

Linux Distros Unpatched Vulnerability : CVE-2026-88384

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OpenEXR 3.4.14 contains a NULL Pointer Dereference in the C++ attribute parsing path. A specially crafted EXR file containing an unknown-type attribute with...

Linux Distros Unpatched Vulnerability : CVE-2026-97484

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - usbip: vhcihcd: fix NULL deref in statusshowvhci platformgetdrvdata can return NULL if a VHCI host controller's probe failed e.g. due to USB bus number...

Linux Distros Unpatched Vulnerability : CVE-2026-88339

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A NULL pointer dereference vulnerability exists in the gfsgvrmlfieldclone function of GPAC 2d7da22e 26.08-DEV. The vulnerability occurs when cloning a PROTO...

Linux Distros Unpatched Vulnerability : CVE-2026-93286

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: appletalk: fix NULL pointer dereference in aarpsendddp aarpsendddp calls atalkfinddevaddrdev in the LocalTalk fast path without checking for NULL. When the...

Linux Distros Unpatched Vulnerability : CVE-2026-97474

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: iwlwifi: mld: purge async notifications upon nic error This fixes a kernel panic in reconfig failure: 1. we have a BSS connection 2. we have a NAN...

CVE-2026-93215: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: cdx: Fix double free when sysfs file creation fails In cdxcreateresattr, if sysfscreatebinfile fails, the code frees resattr but doesn't set cdxdev-resattrnum to NULL. This leaves a dangling pointer in the array. Then...

CVE-2026-97484: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: usbip: vhcihcd: fix NULL deref in statusshowvhci platformgetdrvdata can return NULL if a VHCI host controller's probe failed e.g. due to USB bus number exhaustion. statusshowvhci checked for a NULL pdev but not for a NULL hcd...

ROS-20260924-73-0033

The vulnerability of the qedfallocglobalqueues function in the drivers/scsi/qedf/qedfmain.c file of the Linux operating system’s SCSI device driver kernel module is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

ROS-20260924-73-0029

The vulnerability of the ath9kwmictrlrx function in the drivers/net/wireless/ath/ath9k/wmi.c driver for Atheros/Qualcomm wireless communication adapters in the Linux operating system is related to the access to an uninitialized pointer. Exploiting this vulnerability could allow an attacker to...

ROS-20260924-73-0051

The vulnerability of the buserror030 function in the Linux operating system is related to the assignment of the NULL pointer. Exploiting this vulnerability can allow a remote attacker to cause a service failure...