PT-2026-102953

Name of the Vulnerable Software and Affected Versions Fireware OS affected versions not specified Description A NULL pointer dereference in the NetFlow packet-processing feature allows a remote, unauthenticated attacker to trigger a denial of service by sending a specially crafted IPv6 packet. A...

ROS-20260929-73-0080

The vulnerability of the drivers/iio/accel component in the Linux operating system is related to pointer dereferencing errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2026-18746: NULL Pointer Dereference

parsewriteop in subsys/net/lib/lwm2m/lwm2mmessagehandling.c handles inbound CoAP WRITE/CREATE requests that carry a Block1 option. For the first block of a transfer it called initblockctx and then immediately stored the peer-selected block size with blockctx-ctx.blocksize = blocksize before...

PT-2026-102562

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 157 Firefox ESR versions prior to 153.4 Firefox ESR versions prior to 140.17 Thunderbird versions prior to 157 Description An invalid pointer issue exists within the JavaScript: WebAssembly component. WebAssembly is a...

CVE-2026-100788: Access of Uninitialized Pointer

Invalid pointer in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, and Firefox ESR 140.17...

PT-2026-102777

PX4 Autopilot through 1.17.0 contains a NULL pointer dereference vulnerability in the sd stress command where the -b byte count parameter is parsed without validation before being passed to malloc and memset. Attackers with shell access, including through MAVLink, can supply invalid byte count...

ROS-20260929-73-0190

The vulnerability of the acpinswalknamespace function in the drivers/acpi/acpica/nswalk.c driver of the ACPI driver an extended configuration and power management interface of the Linux kernel is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a...

ROS-20260929-73-0198

The vulnerability of the drm/i915/gem component of the Linux operating system is related to pointer arithmetic errors. Exploiting this vulnerability could allow a hacker to cause a service failure...

ROS-20260929-73-0199

The vulnerability of the seqivaeadencrypt function in the crypto/seqiv.c module of the Linux kernel’s cryptography subsystem is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a system failure...

ROS-20260929-73-0195

The vulnerability of the sysperfeventopen function in the Linux operating system is related to the assignment of the NULL pointer. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2026-102623: NULL Pointer Dereference

A flaw was found in KubeVirt. An authenticated user with permission to create Virtual Machine Instances VMIs can cause a Denial of Service DoS by submitting a virtual machine definition with an empty ephemeral volume. The virt-controller component fails to properly validate the volume...

PT-2026-102790

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. affected versions not specified Description A NULL pointer dereference occurs when evicting the sole MSRP Media Service Resource Protocol attribute. A NULL pointer dereference is a software error where th...

PT-2026-102789

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description A NULL pointer dereference occurs when the MSRP attribute table is exhausted. A NULL pointer dereference is a type of software error where a program attempts to...

CVE-2026-102723: NULL Pointer Dereference

NULL Pointer Dereference on MSRP Attribute Table Exhaustion...

ROS-20260929-73-0111

The vulnerability of the cs35l41hdareadacpi function in the sound/hda/codecs/side-codecs/cs35l41hda.c module of the Linux kernel’s sound subsystem is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a system failure...

ROS-20260929-73-0084

The vulnerability of the pcl818detach function in the drivers/comedi/drivers/pcl818.c module, which supports Linux kernel-based data collection devices, is related to the pointer manipulation. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

ROS-20260929-73-0009

The vulnerability of the tcmlooptpgaddressshow function in the Linux operating system is related to the assignment of the NULL pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

ROS-20260929-73-0082

The vulnerability of the uasqueuecommandlck function in the drivers/usb/storage/uas.c module of the Linux device driver framework is related to the pointer that becomes invalid after a certain period of time. Exploiting this vulnerability could allow an attacker to cause a service failure...

NULL Pointer Dereference in CMP Client Revocation Response Handling

Issue summary: A CMP client that requests certificate revocation on the basis of a PKCS10 CSR may dereference a NULL pointer and terminate abnormally when processing a crafted revocation response. Impact summary: The NULL pointer dereference happens on a read which leads to a crash and a Denial o...

SUSE SLES15 Security Update : 389-ds (SUSE-SU-2026:4380-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4380-1 advisory. - CVE-2026-11770: pre-auth LDAP filter injection in CleanAllRUV status check bsc1273133. - CVE-2026-18355: heap buffer overflow in...