Skip to content
OpenAdvisories
High · 7.1 CVE-2026-8035 EUVD-2026-33991GHSA-5rw2-422p-gwxr

NULL pointer dereference in NI-PAL

Published Jun 2, 2026 · Updated Nov 11, 2026 · Assigned by NI

Description

Improper input validation in the NI-PAL kernel driver may allow a local authenticated user to cause a denial of service by triggering a crash due to a NULL pointer dereference. This vulnerability affects NI-PAL 26.3.0 and prior versions on Windows and Linux.

Affected products

VendorProductAffectedFixed
NI NI-PAL ≤ 26.3.0 —

References