CVE-2026-89863: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: edif: Fix NULL pointer deref in RX SA delete check qlachkedifrxsadeletepending obtains the SCSI command via GETCMDSPsp and immediately dereferences cmd-scdatadirection. That command pointer can be NULL: the firmwar...

CVE-2026-89912: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: vgic-its: Don't dereference a NULL collection on ITT save MAPC with V=0 drops ite-collection but leaves the ITE on the device's ITT list, and vgicitssaveite dereferences it unconditionally. A guest that issues MAPD,...

EUVD-2026-80953

A Null Pointer Dereference in the mkschedeventclose function mkserver/mkscheduler.c of Monkey through commit 4fb0c16 allows attackers to cause a Denial of Service DoS via sending a crafted HTTP request to the server...

CVE-2026-38999

A Null Pointer Dereference in the mkschedeventclose function mkserver/mkscheduler.c of Monkey through commit 4fb0c16 allows attackers to cause a Denial of Service DoS via sending a crafted HTTP request to the server...

CVE-2026-90020: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: USB: gadget: fix NULL pointer dereference in gadgetdevioctl gadgetdevioctl reads dev-gadget before acquiring dev-lock, but dev-state is checked after acquiring the lock. Therefore a concurrent bind can change the device state...

PT-2026-93512

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the video-i2c media component where the kthread run function returns an ERR PTR an error pointer upon failure instead of NULL. When the start streaming function fails,...

CVE-2026-92413: NULL Pointer Dereference

A flaw has been found in Artifex MuPDF up to b6d17493700c621c0e70036980a6ebd06d2202c9. Affected by this vulnerability is the function pdfopenfilter of the file pdf-stream.c of the component PDF Xref Loading. Executing a manipulation can lead to null pointer dereference. The attack can be launched...

CVE-2026-92417: NULL Pointer Dereference

A vulnerability was found in Open5GS up to 2.8.0. This affects the function ogspfcpparsevolumemeasurement in the library lib/pfcp/types.c of the component PFCP Handler. The manipulation results in null pointer dereference. The attack may be launched remotely. The patch is identified as...

CVE-2026-38999: NULL Pointer Dereference

A Null Pointer Dereference in the mkschedeventclose function mkserver/mkscheduler.c of Monkey through commit 4fb0c16 allows attackers to cause a Denial of Service DoS via sending a crafted HTTP request to the server...

CVE-2026-89849: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Reject non-SCSI SRB on status IOCB fast path qla2x00statusentry filters out non-TYPESRB entries and the SRBNVMECMD, SRBBIDICMD and SRBTMCMD types, then falls through to a SCSI fast path that assumes the command is ...

CVE-2026-89835: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: f2fs: avoid NULL checkpoint thread access in sysfs checkpointmerge can be enabled even when no checkpoint merge thread is running. A read-only mount is one case: f2fs does not start f2fsissueckpt there, but ckptthreadioprio is...

CVE-2026-89993: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: dmaengine: dw-edma: Initialize IRQ data before requesting IRQs dwedmairqrequest passes struct dwedmairq to requestirq before dwedmachannelsetup fills the back pointer. A shared interrupt can therefore enter the handler with...

CVE-2026-89966: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: mm/hugetlbcma: fix null nodemask dereference in hugetlbcmaallocfrozenfolio allocbuddyhugetlbfoliowithmpol can pass a NULL nodemask to allocfreshhugetlbfolio as a fallback to allocate from all nodes. If order is gigantic,...

PT-2026-93661

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference exists in the gadget dev ioctl function. The issue occurs because the function reads dev-gadget before acquiring dev-lock, while the dev-state is checked only...

PT-2026-93476

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the f2fs file system where the checkpoint merge feature can be enabled even if no checkpoint merge thread is active, such as during a read-only mount. In this state, t...

PT-2026-93542

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference exists in the airspy driver. The airspy disconnect function clears the s-udev variable while holding the v4l2 lock. However, if a user closes the device after ...

PT-2026-93574

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference occurs during the ACPI probe of the dps310 pressure sensor. When the device is enumerated via its ACPI HID IFX3100, the i2c client get device id function retur...

PT-2026-93634

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference occurs in the dw-edma component of the DMA engine. The function dw edma irq request passes the dw edma irq structure to request irq before the dw edma channel...

CVE-2026-89933: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: iio: pressure: dps310: fix NULL pointer dereference on ACPI probe When the device is enumerated through its ACPI HID IFX3100, i2cclientgetdeviceid returns NULL: the ACPI-derived client name does not match the driver's i2cdeviceid...

CVE-2026-89963: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: powerpc/kexecfile: Fix null-ptr-def in extra size calculation A static Sashiko AI review identified a potential NULL pointer dereference in kexecextrafdtsizeppc64. On platforms without any reserved memory regions,...