The vulnerability of the yurex_probe() function in the drivers/usb/misc/yurex.c module of the Linux device driver for USB solenoids allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the yurexprobe function in the drivers/usb/misc/yurex.c module of the Linux device driver for USB devices relates to access to an uninitialized pointer. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and accessibility...

PT-2026-103377

🚨 CVE-2026-47528 NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the firmware where an attacker could cause an access of an uninitialized pointer. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges,...

CVE-2026-47528: Access of Uninitialized Pointer

NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the firmware where an attacker could cause an access of an uninitialized pointer. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosur...

ROS-20260930-73-0142

The vulnerability of the setupnicdevices function in the drivers/net/ethernet/cavium/liquidio/liomain.c file of the Linux kernel is related to the use of an uninitialized pointer. Exploiting this vulnerability could allow a attacker to cause a service failure...

CVE-2026-98065

A flaw was found in the Linux kernel's BPF Berkeley Packet Filter subsystem. A local user can cause a Denial of Service DoS by creating a hash map lacking key type information and reading it through the BPF file system. Due to missing validation of BPF Type Format BTF metadata, the kernel attempt...

ROS-20260929-73-0176

The vulnerability of the ibnlhandleipresresp function in the drivers/infiniband/core/addr.c module of the Linux operating system’s kernel driver relates to access to an uninitialized pointer. Exploiting this vulnerability could allow a attacker to cause a service failure...

ROS-20260928-73-0126

The vulnerability of the qmimuxrxfixup function in Linux operating systems is related to the use of an uninitialized pointer. Exploiting this vulnerability could allow an attacker to trigger a service failure...

CVE-2026-88384

A flaw was found in OpenEXR. An attacker could exploit this vulnerability to cause a Denial of Service DoS by providing a specially crafted EXR image file for processing. When the library parses an unknown attribute with a size of zero, it attempts an invalid memory operation on an uninitialized...

ROS-20260924-73-0029

The vulnerability of the ath9kwmictrlrx function in the drivers/net/wireless/ath/ath9k/wmi.c driver for Atheros/Qualcomm wireless communication adapters in the Linux operating system is related to the access to an uninitialized pointer. Exploiting this vulnerability could allow an attacker to...

ROS-20260923-73-0067

The vulnerability of the brcmfsetpmk function in the drivers/net/wireless/broadcom/brcm80211/brcmfmac/cfg80211.c driver of the Broadcom wireless adapter driver for the Linux operating system is related to the access to an uninitialized pointer. Exploiting this vulnerability could allow an attacke...

ROS-20260923-73-0097

The vulnerability of the nicvalidsize function in the Linux operating system’s kernel is related to the access to an uninitialized pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

ROS-20260922-73-0069

The vulnerability of the amdgpugarttableramfree function in the drivers/gpu/drm/amd/amdgpu/amdgpugart.c driver of the Direct Rendering Infrastructure DRI AMD GPU kernel for the Linux operating system is related to the access to an uninitialized pointer. Exploiting this vulnerability could allow a...

Linux Distros Unpatched Vulnerability : CVE-2026-90104

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NFSv4.1: zero referring call lists before decoding decodecbsequenceargs allocates csarclists with kmallocobjs, so each referringcalllist starts uninitialized...

DEBIAN-CVE-2026-90104

In the Linux kernel, the following vulnerability has been resolved: NFSv4.1: zero referring call lists before decoding decodecbsequenceargs allocates csarclists with kmallocobjs, so each referringcalllist starts uninitialized. decoderclist assigns rclrefcalls only when rclnrefcalls is nonzero. A...

CVE-2026-90104

In the Linux kernel, the following vulnerability has been resolved: NFSv4.1: zero referring call lists before decoding decodecbsequenceargs allocates csarclists with kmallocobjs, so each referringcalllist starts uninitialized. decoderclist assigns rclrefcalls only when rclnrefcalls is nonzero. A...

CVE-2026-90104 NFSv4.1: zero referring call lists before decoding

In the Linux kernel, the following vulnerability has been resolved: NFSv4.1: zero referring call lists before decoding decodecbsequenceargs allocates csarclists with kmallocobjs, so each referringcalllist starts uninitialized. decoderclist assigns rclrefcalls only when rclnrefcalls is nonzero. A...

The vulnerability in the WebFig web interface of the MikroTik RouterOS operating system allows a hacker to increase their privileges and gain unauthorized access to protected information.

The vulnerability in the WebFig web interface of the MikroTik RouterOS operating system is related to the use of an uninitialized pointer. Exploiting this vulnerability can allow a malicious actor to increase their privileges and gain unauthorized access to protected information...

CVE-2026-89943

In the Linux kernel, the following vulnerability has been resolved: ASoC: loongson: Fix error handling in ACPI property parsing In loongsoncardparseacpi, the return value of devicepropertyreadstring for the codec-dai-name property was ignored. If the property is missing or invalid, an uninitializ...

DEBIAN-CVE-2026-89943

In the Linux kernel, the following vulnerability has been resolved: ASoC: loongson: Fix error handling in ACPI property parsing In loongsoncardparseacpi, the return value of devicepropertyreadstring for the codec-dai-name property was ignored. If the property is missing or invalid, an uninitializ...

CVE-2026-89943 ASoC: loongson: Fix error handling in ACPI property parsing

In the Linux kernel, the following vulnerability has been resolved: ASoC: loongson: Fix error handling in ACPI property parsing In loongsoncardparseacpi, the return value of devicepropertyreadstring for the codec-dai-name property was ignored. If the property is missing or invalid, an uninitializ...