112262 matches found
PT-2026-96542
In the Linux kernel, the following vulnerability has been resolved: nfsd: fix stale s2s cp stateids IDR entry for async COPY For an async COPY, nfsd4 copy called nfs4 init copy state before dup copy fields, so the s2s cp stateids IDR was pointed at &u-copy-cp stateid -- memory in the per-rqstp...
AlmaLinux 10 : gstreamer1-plugins-base (ALSA-2026:66460)
The remote AlmaLinux 10 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:66460 advisory. gstreamer1-plugins-base: gstreamer: NULL/invalid-pointer dereference in gstrtspmessageparseauthcredentials when parsing a crafted Digest...
DEBIAN-CVE-2026-79590
A NULL pointer dereference vulnerability exists in the Prism parser component of mruby 4.0.0. An attacker can provide a specially crafted Ruby source file that triggers the parser to pass a NULL pointer to nonnull string handling functions, resulting in undefined behavior and application crash...
CVE-2026-79590
A NULL pointer dereference vulnerability exists in the Prism parser component of mruby 4.0.0. An attacker can provide a specially crafted Ruby source file that triggers the parser to pass a NULL pointer to nonnull string handling functions, resulting in undefined behavior and application crash...
UBUNTU-CVE-2026-79590
A NULL pointer dereference vulnerability exists in the Prism parser component of mruby 4.0.0. An attacker can provide a specially crafted Ruby source file that triggers the parser to pass a NULL pointer to nonnull string handling functions, resulting in undefined behavior and application crash...
CVE-2026-79590
A NULL pointer dereference vulnerability exists in the Prism parser component of mruby 4.0.0. An attacker can provide a specially crafted Ruby source file that triggers the parser to pass a NULL pointer to nonnull string handling functions, resulting in undefined behavior and application crash...
Security Bulletin: IBM® Db2® federated server could allow a remote authenticated attacker to cause a denial of service due to a null pointer dereference (CVE-2026-16702)
Summary IBM® Db2® federated server could allow a remote authenticated attacker to cause a denial of service due to a null pointer dereference CVE-2026-16702 Vulnerability Details CVEID:CVE-2026-16702 DESCRIPTION: DB2 for Linux, UNIX and Windows includes DB2 Connect Server could allow a remote...
DEBIAN-CVE-2026-88054
Tesseract is an open source OCR engine. In version 5.5.3 and earlier, Plumbing::DeSerialize in src/lstm/plumbing.cpp rejects excessively large network stacks but accepts a zero-length stack for NTSERIES, NTPARALLEL, or NTREVERSED layers in a crafted .traineddata model. During LSTMRecognizer...
CVE-2026-88054
Tesseract is an open source OCR engine. In version 5.5.3 and earlier, Plumbing::DeSerialize in src/lstm/plumbing.cpp rejects excessively large network stacks but accepts a zero-length stack for NTSERIES, NTPARALLEL, or NTREVERSED layers in a crafted .traineddata model. During LSTMRecognizer...
CVE-2026-88054 Tesseract: Denial of service via empty-stack dereference in Plumbing/Series at model load
Tesseract is an open source OCR engine. In version 5.5.3 and earlier, Plumbing::DeSerialize in src/lstm/plumbing.cpp rejects excessively large network stacks but accepts a zero-length stack for NTSERIES, NTPARALLEL, or NTREVERSED layers in a crafted .traineddata model. During LSTMRecognizer...
EUVD-2026-75636
Tesseract is an open source OCR engine. In version 5.5.3 and earlier, Plumbing::DeSerialize in src/lstm/plumbing.cpp rejects excessively large network stacks but accepts a zero-length stack for NTSERIES, NTPARALLEL, or NTREVERSED layers in a crafted .traineddata model. During LSTMRecognizer...
CVE-2026-88054
Tesseract is an open source OCR engine. In version 5.5.3 and earlier, Plumbing::DeSerialize in src/lstm/plumbing.cpp rejects excessively large network stacks but accepts a zero-length stack for NTSERIES, NTPARALLEL, or NTREVERSED layers in a crafted .traineddata model. During LSTMRecognizer...
SUSE CVE-2026-86141
xmlregexp in libxml2 before 2.15.4 has a NULL pointer dereference in xmlRegNewParserCtxt after a strdup failure, i.e., it does not calculate a string length after NULL checking...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability stems from the i3cdevicegetsupportedxfermode function, which dereferences dev-desc without holding the bus-lock lock. This may lead to race conditions or illegal pointer access...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability stems from the use of paramsetcharp, which releases the original parameter values before successful memory allocation. When allocation fails, the parameters are set to NULL, potentially leading to null pointer dereferencing...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability stems from the ipv6rplsrhrcv function, which does not perform a NULL check on the idev returned by in6devget. When the device’s MTU drops below IPV6MINMTU, addrconfifdown will clear dev-ip6ptr using RCUINITPOINTER. As a result, dat...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability arises from the fact that nlmsvcops is declared by nfsdlockdinit, and normal storage is used during the cleanup of nfsdlockdshutdown. However, lockd unreleases this pointer without protection at the distribution point in...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability stems from a race condition during the ravb driver’s PTP clock destruction process, where ravbptpinterrupt and ravbptpstop function have conflicting behaviors. This allows access to the clock pointers even after the clock has been...
Linux Kernel Security Vulnerabilities
The Linux kernel version 6.15 contains security vulnerabilities. These vulnerabilities stem from lifecycle issues with the CXL MCE notifier, which may lead to null pointer dereferencing and reuse of resources after memory management operations...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability arises from the fact that zramDestroyComps resets all compressors, including the main compressor, to NULL without setting the default main compressor. This may lead to null pointer dereferencing...