PT-2026-105768

A remote, unauthenticated TLS client can make a server crash or call through a freed pointer if its sni callback assigns a different context to SSLSocket.context the documented way to select a certificate per server name and nothing else keeps the original ssl.SSLContext alive. Typical cases are...

CVE-2026-86134: NULL Pointer Dereference

A NULL pointer dereference vulnerability in the WatchGuard Fireware OS authentication process allows a remote, unauthenticated attacker to crash the management daemon by sending a specially request to the login interface, resulting in a denial of service...

AlmaLinux 9.2 [TuxCare] Security Update: openssl / openssl-devel / openssl-libs / openssl-perl (ALMALINUX9.2:CLSA-2026:1782983109)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1782983109 advisory. - Issue summary: An attacker-controlled CMP Certificate Management Protocol server could trigger a NULL pointer dereference in a CMP client...

The vulnerability of the batadv_bla_purge_claims() function in the net/batman-adv/bridge_loop_avoidance.c module, a part of the network functions of the Linux operating system’s kernel, allows a hacker to trigger a service failure.

The vulnerability of the function batadvblapurgeclaims in the net/batman-adv/bridgeloopavoidance.c module, which is part of the network functions of the Linux operating system’s kernel, relates to the assignment of pointers. Exploiting this vulnerability could allow a remote attacker to cause...

CVE-2026-103547: Incorrect Authorization

In ldapd in OpenBSD 7.8 before errata 057 and 7.9 before errata 021, delegated BSD authentication results are correlated only by the LDAP child process client file descriptor and LDAP message ID. After a connection closes, a later connection that reuses the same file descriptor and message ID can...

CVE-2026-47584: NULL Pointer Dereference

NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel module where an attacker with local access could cause a NULL pointer dereference. A successful exploit of this vulnerability might lead to denial of service...

CVE-2026-47563: NULL Pointer Dereference

NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where a user could cause a NULL pointer dereference. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tamperi...

CVE-2026-47557: NULL Pointer Dereference

NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where an unprivileged user could cause a NULL pointer dereference. A successful exploit of this vulnerability might lead to denial of service...

CVE-2026-47531: NULL Pointer Dereference

NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer where an attacker could cause a null pointer dereference. A successful exploit of this vulnerability might lead to denial of service...

CVE-2026-47528: Access of Uninitialized Pointer

NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the firmware where an attacker could cause an access of an uninitialized pointer. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosur...

ROS-20260930-73-0142

The vulnerability of the setupnicdevices function in the drivers/net/ethernet/cavium/liquidio/liomain.c file of the Linux kernel is related to the use of an uninitialized pointer. Exploiting this vulnerability could allow a attacker to cause a service failure...

ROS-20260930-73-0127

The vulnerabilities of the functions cmpcaccelsensitivityshowv4 and cmpcaccelsensitivitystorev4 in the driver/platform/x86/classmate-laptop.c file of the Linux operating system’s X86 kernel device driver are related to pointer manipulation. Exploiting these vulnerabilities can allow attackers to...

ROS-20260930-73-0117

The vulnerability of the scsi/qla2xxx/qlags.c component of the Linux operating system is related to pointer arithmetic errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260930-73-0115

The vulnerability of the pci/endpoint/pci-ep-cfs.c component in the Linux operating system is related to pointer arithmetic errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260930-73-0084

The vulnerability of the ethernet/emulex/benet/becmds.c component in the Linux operating system is related to pointer dereferencing errors. Exploiting this vulnerability could allow an attacker to cause a service failure...

ROS-20260930-73-0027

The vulnerability of the vortexprobe1 function in the drivers/net/ethernet/3com/3c59x.c file of the Linux kernel’s network adapter driver is related to pointer manipulation. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

ROS-20260930-73-0014

The vulnerability of the nvmettcphandleh2cdatapdu function in the operating system’s kernel is related to an error in pointer arithmetic. Exploiting this vulnerability could allow an attacker to cause a service failure...

ROS-20260930-73-0011

The vulnerability of the monhandleauthdone function in the net/ceph/monclient.c module, which is part of the Linux kernel’s networking functions, relates to the assignment of pointers. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

ROS-20260930-73-0010

The vulnerability of the allocchooseargmap function in the net/ceph/osdmap.c module, which is part of the Linux kernel’s networking functions, relates to the pointer manipulation. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility...

PT-2026-103524

Name of the Vulnerable Software and Affected Versions OpenBSD versions 7.8 through 7.8 before errata 057 OpenBSD versions 7.9 through 7.9 before errata 021 Description In the ldapd service, delegated BSD authentication results are correlated using only the LDAP child process client file descripto...