The vulnerability of the amdgpu_hmm_range_get_pages() function in the drivers/gpu/drm/amd/amdgpu/amdgpu_hmm.c driver for the Direct Rendering Infrastructure (DRI) of AMD GPU cores in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the amdgpuhmmrangegetpages function in the drivers/gpu/drm/amd/amdgpu/amdgpuhmm.c driver for the Direct Rendering Infrastructure DRI of AMD GPUs in the Linux operating system is related to the access to an uninitialized pointer. Exploiting this vulnerability could allow an...

The vulnerability in the function amdgpu_gart_table_ram_free() of the drivers/gpu/drm/amd/amdgpu/amdgpu_gart.c driver of the Direct Rendering Infrastructure (DRI) AMD GPU kernel for the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the amdgpugarttableramfree function in the drivers/gpu/drm/amd/amdgpu/amdgpugart.c driver of the Direct Rendering Infrastructure DRI AMD GPU kernel for the Linux operating system is related to the access to an uninitialized pointer. Exploiting this vulnerability could allow a...

The vulnerability of the usa49wg_indat_callback() function in the drivers/usb/serial/keyspan.c file of the Linux operating system’s USB device driver module allows a hacker to cause a service failure.

The vulnerability of the usa49wgindatcallback function in the drivers/usb/serial/keyspan.c file of the Linux device driver for USB devices is related to access to an uninitialized pointer. Exploiting this vulnerability could allow a attacker to cause a service failure...

EulerOS 2.0 SP12 : libssh2 (EulerOS-SA-2026-3354)

According to the versions of the libssh2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : libssh2 through 1.11.1 reads an attacker-controlled 32-bit attribute count from a publickey-subsystem response and uses it in the allocation...

CVE-2026-67281: Access of Uninitialized Pointer

RouterOS WebFig contains an unauthenticated file-read vulnerability in the /jsproxy path where a newly allocated session retains a stale uninitialized principal pointer used for file authorization. An unauthenticated attacker can prepare the allocator so that the file-serving path dereferences th...

The vulnerability of the fwctl_exit() function in the drivers/fwctl/main.c module of the Linux kernel allows a hacker to cause a service failure.

The vulnerability of the fwctlexit function in the drivers/fwctl/main.c file of the Linux kernel module involves access to an uninitialized pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the nsim_dev_trap_skb_build() function in the drivers/net/netdevsim/dev.c module of the network device drivers for the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the nsimdevtrapskbbuild function in the drivers/net/netdevsim/dev.c file of the Linux kernel’s network device driver module is related to the access to an uninitialized pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the nft_exthdr_init() function in the net/netfilter/nft_exthdr.c module of the netfilter component of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the nftexthdrinit function in the net/netfilter/nftexthdr.c module of the netfilter component of the Linux operating system is related to the access to an uninitialized pointer. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity...

The vulnerability in the virtio_gpu_remove() function of the drivers/gpu/drm/virtio/virtgpu_drv.c driver, a component of the Direct Rendering Infrastructure (DRI) kernel of the Linux operating system, allows a malicious actor to cause a service failure.

The vulnerability of the virtiogpuremove function in the drivers/gpu/drm/virtio/virtgpudrv.c driver of the Direct Rendering Infrastructure DRI subsystem in the Linux operating system is related to access to an uninitialized pointer. Exploiting this vulnerability could allow an attacker to cause a...

The vulnerability of the bpf_prog_test_run_skb() function in the net/bpf/test_run.c module, which is part of the networking functions of the Linux operating system’s kernel, allows a hacker to cause a service failure.

The vulnerability of the bpfprogtestrunskb function in the net/bpf/testrun.c module, which implements networking functions in the Linux kernel, relates to access to an uninitialized pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the xe_display_init_early() function in the drivers/gpu/drm/xe/display/xe_display.c file of the Direct Rendering Infrastructure (DRI) driver in the Linux kernel allows a attacker to cause a service failure.

The vulnerability of the xedisplayinitearly function in the drivers/gpu/drm/xe/display/xedisplay.c file of the Direct Rendering Infrastructure DRI driver in the Linux kernel relates to access to an uninitialized pointer. Exploiting this vulnerability could allow an attacker to cause a system...

The vulnerability of the qcom_slim_ngd_ctrl_probe() function in the drivers/slimbus/qcom-ngd-ctrl.c module of the SLIMbus driver for the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the qcomslimngdctrlprobe function in the drivers/slimbus/qcom-ngd-ctrl.c module of the SLIMbus driver in the Linux operating system is related to the access to an uninitialized pointer. Exploiting this vulnerability could allow a attacker to cause a service failure...

The vulnerability of the rseq_exit_user_update() function in the include/linux/rseq_entry.h module of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the rseqexituserupdate function in the include/linux/rseqentry.h module of the Linux kernel is related to access to an uninitialized pointer. Exploiting this vulnerability could allow an attacker to cause a system failure...

The vulnerability of the cdns_resume() function in the drivers/usb/cdns3/core.c file of the Linux operating system’s device driver framework allows a hacker to induce a service failure.

The vulnerability of the cdnsresume function in the drivers/usb/cdns3/core.c file of the Linux device driver framework relates to access to an uninitialized pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the usblp_probe() function in the drivers/usb/class/usblp.c file of the Linux operating system’s USB device driver module allows a hacker to cause a service failure.

The vulnerability of the usblpprobe function in the drivers/usb/class/usblp.c file of the Linux device driver for USB devices is related to the access to an uninitialized pointer. Exploiting this vulnerability could allow a attacker to cause a service failure...

The vulnerability of the usblp_cache_device_id_string() function in the drivers/usb/class/usblp.c module of the Linux operating system’s USB device driver allows a hacker to cause a service failure.

The vulnerability of the usblpcachedeviceidstring function in the drivers/usb/class/usblp.c module of the Linux device driver framework relates to access to an uninitialized pointer. Exploiting this vulnerability could allow a attacker to cause a system failure...

CVE-2026-80751: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: pmdomain: mediatek: mfg: initialize prevo in mtkmfgattachdev mtkmfgattachdev reads prevo on the first iteration of its loop, in "if prevo && prevo-freq == o-freq", before prevo is assigned at the end of the loop body. On that fir...

K000163141: NLnet Labs Unbound vulnerability CVE-2026-42959

Security Advisory Description NLnet Labs Unbound up to and including version 1.25.0 has a denial of service vulnerability in the DNSSEC validator that can lead to a crash given malicious upstream replies. When Unbound constructs chase-reply messages for validation, the code uses the wrong counter...

F5 Networks BIG-IP : NLnet Labs Unbound vulnerability (K000163141)

The version of F5 Networks BIG-IP installed on the remote host is prior to 17.1.3.5 / 17.5.1.9 / 21.1.0.2. It is, therefore, affected by a vulnerability as referenced in the K000163141 advisory. NLnet Labs Unbound up to and including version 1.25.0 has a denial of service vulnerability in the...

SUSE CVE-2026-72110

In the Linux kernel, the following vulnerability has been resolved: bpf,fork: wipe -bpfstorage before bailouts that access it Currently, copyprocess can bail out to freetask before p-bpfstorage has been initialized, with this call graph shown here for the !CONFIGMEMCG case: copyprocess...