CVE-2026-23019
In the Linux kernel, the following vulnerability has been resolved: net: marvell: prestera: fix NULL dereference on devlink_alloc() failure
CVSS
5.5
Medium
EPSS
0.1%
p2
KEV
—
Exploit Today
1
0-100
Published: Jan 31, 2026 · Last modified: Jul 14, 2026 · CWE-476
0.1%EPSS · 30 days0.1%
2026-06-302026-07-16
In the Linux kernel, the following vulnerability has been resolved: net: marvell: prestera: fix NULL dereference on devlink_alloc() failure devlink_alloc() may return NULL on allocation failure, but prestera_devlink_alloc() unconditionally calls devlink_priv() on the returned pointer. This leads to a NULL pointer dereference if devlink allocation fails. Add a check for a NULL devlink pointer and return NULL early to avoid the crash.
- git.kernel.orghttps://git.kernel.org/stable/c/325aea74be7e192b5c947c782da23b0d19a5fda2
- git.kernel.orghttps://git.kernel.org/stable/c/326a4b7e61d01db3507f71c8bb5e85362f607064
- git.kernel.orghttps://git.kernel.org/stable/c/3950054c9512add0cc79ab7e72b6d2f9f675e25b
- git.kernel.orghttps://git.kernel.org/stable/c/8a4333b2818f0d853b43e139936c20659366e4a0
- git.kernel.orghttps://git.kernel.org/stable/c/94e070cd50790317fba7787ae6006934b7edcb6f
- git.kernel.orghttps://git.kernel.org/stable/c/a428e0da1248c353557970848994f35fd3f005e2
- cert-portal.siemens.comhttps://cert-portal.siemens.com/productcert/html/ssa-019113.html
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2026-328547.5 HIG91.7%
——28LibVNCServer versions 0.9.15 and prior (fixed in commit dc78dee) contain null pointer dereference vulnerabilities in the HTTP proxy handlers within httpProcessInput() in httpd.c that allow remote attackers to cause a denial of service by sending specially crafted HTTP requests. Attackers can exploit missing validation of strchr() return values in the CONNECT and GET proxy handling paths to trigger null pointer dereferences and crash the server when httpd and proxy features are enabled.2dCVE-2026-32387.5 HIG84.0%
——25A flaw was found in Samba’s WINS server component when running as an Active Directory Domain Controller. The WINS protocol handlers for certain request types did not properly validate incoming packets, allowing an unauthenticated remote attacker to trigger a NULL pointer dereference and crash the WINS service using specially crafted UDP packets.2dCVE-2026-15847.5 HIG69.0%
——21A flaw was found in gnutls. A remote, unauthenticated attacker can exploit this vulnerability by sending a specially crafted ClientHello message with an invalid Pre-Shared Key (PSK) binder value during the TLS handshake. This can lead to a NULL pointer dereference, causing the server to crash and resulting in a remote Denial of Service (DoS) condition.2dCVE-2026-250757.5 HIG59.3%
——18strongSwan versions 4.5.0 prior to 6.0.5 contain an integer underflow vulnerability in the EAP-TTLS AVP parser that allows unauthenticated remote attackers to cause a denial of service by sending crafted AVP data with invalid length fields during IKEv2 authentication. Attackers can exploit the failure to validate AVP length fields before subtraction to trigger excessive memory allocation or NULL pointer dereference, crashing the charon IKE daemon.3dCVE-2026-276517.5 HIG56.3%
——17When the ngx_mail_auth_http_module module is enabled on NGINX Plus or NGINX Open Source, undisclosed requests can cause worker processes to terminate. This issue may occur when (1) CRAM-MD5 or APOP authentication is enabled, and (2) the authentication server permits retry by returning the Auth-Wait response header. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.2dCVE-2020-218176.5 MED55.7%
——17A null pointer dereference issue exists in GNU LibreDWG 0.10.2641 via htmlescape ../../programs/escape.c:29. which causes a denial of service (application crash).8d